Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot install AV software, slow PC


  • This topic is locked This topic is locked
18 replies to this topic

#1 Lustrol

Lustrol

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 03 February 2018 - 02:29 PM

Hello I have problem with my computer and I need your help, it is probably infected. Avast stop working, when system is starting it's always show error, same as I use avast clear tool ( errors attached). I already try this in safe mode. I installed MBAM, but it didn't find any infection. Pc has more anomalies, for example internet explorer doesn't working, PC is slow. I used FRST tool and I am sending logs:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27.01.2018
Ran by iveta (administrator) on IVETA-PC (03-02-2018 19:25:54)
Running from C:\Users\iveta\Desktop
Loaded Profiles: iveta (Available Profiles: iveta)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Safe Mode (minimal)
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11779176 2011-02-25] (Realtek Semiconductor)
HKLM-x32\...\Run: [OSD Utility] => C:\Program Files (x86)\Lenovo\Lenovo BrgVolOSD\BrgVolOSD.exe [18251776 2011-04-19] (Quanta Computer Inc.)
HKLM-x32\...\Run: [jmekey] => C:\Windows\jmesoft\hotkey.exe [118784 2011-05-17] (Lenovo)
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-03-16] ()
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-10-13] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [230696 2011-10-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo Dynamic Brightness System] => C:\Program Files\Lenovo\Lenovo Brightness System\RunLDBS.exe [1751904 2011-09-22] (TODO: <公司名>)
HKLM-x32\...\Run: [Lenovo Eye Distance System] => C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [264704 2011-08-09] (Lenovo)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [217088 2008-01-20] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-04-18] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\...\MountPoints2: E - E:\launcher.exe
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\...\MountPoints2: G - G:\SETUP.EXE
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\...\MountPoints2: {463632a9-766c-11e1-a9d3-047d7b36fa0e} - F:\HPLauncher.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2011-12-08]
ShortcutTarget: SRS Premium Sound.lnk -> C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (SRS Labs, Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.8.14
Tcpip\..\Interfaces\{DCAA660D-9F05-42FF-97B6-1223E73AAAD5}: [DhcpNameServer] 192.168.8.14
Tcpip\..\Interfaces\{E650C693-AA05-4FCD-B038-E46A4C6E86D0}: [DhcpNameServer] 10.14.0.1
 
Internet Explorer:
==================
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LEND_skSK477
SearchScopes: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LEND_skSK477
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-16] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-01] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-16] (Avast Software s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-01] (Google Inc.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-01] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-01] (Google Inc.)
Toolbar: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-01] (Google Inc.)
 
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-16] [Legacy] [not signed]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-01-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-01-14] (Google Inc.)
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND" 
CHR Profile: C:\Users\iveta\AppData\Local\Google\Chrome\User Data\Default [2018-02-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\iveta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-16]
CHR crx: C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\default_apps\search.crx [2015-07-13]
CHR crx: C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\default_apps\search.crx [2015-04-13]
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-16] (Avast Software s.r.o.)
S2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-03-16] () [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2006-11-10] (Nero AG) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-16] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-16] (Avast Software s.r.o.)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-16] (Avast Software s.r.o.)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-16] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-16] (Avast Software s.r.o.)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-03-16] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-16] (Avast Software s.r.o.)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-03-16] ()
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2018-02-03] (Malwarebytes)
S3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1460808 2013-05-02] (Realtek Semiconductor Corporation )
S1 VD_FileDisk; C:\Windows\SysWow64\Drivers\VD_FileDisk.sys [15872 2006-01-13] (Flint Incorporation) [File not signed]
S3 VMC412; C:\Windows\System32\Drivers\VMC412.sys [243328 2011-07-13] (Vimicro Corporation)
R0 WinI2C-DDC; C:\Windows\System32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R0 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [15712 2010-03-23] (Nicomsoft Ltd.)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-02-03 19:25 - 2018-02-03 19:26 - 000011922 _____ C:\Users\iveta\Desktop\FRST.txt
2018-02-03 19:25 - 2018-02-03 19:25 - 000000000 ____D C:\Users\iveta\AppData\Local\ElevatedDiagnostics
2018-02-03 19:25 - 2018-02-03 19:25 - 000000000 ____D C:\FRST
2018-02-03 19:25 - 2018-02-03 19:14 - 002393088 _____ (Farbar) C:\Users\iveta\Desktop\FRST64.exe
2018-02-03 16:25 - 2018-02-03 16:25 - 000003272 ____N C:\bootsqm.dat
2018-02-03 16:10 - 2018-02-03 19:24 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-02-03 16:00 - 2018-02-03 15:56 - 008905328 _____ (AVAST Software) C:\Users\iveta\Desktop\avastclear.exe
2018-02-03 15:15 - 2018-02-03 15:15 - 000000000 ____D C:\Users\iveta\AppData\Local\AvgSetupLog
2018-02-03 15:15 - 2018-02-03 15:15 - 000000000 ____D C:\Users\iveta\AppData\Local\Avg
2018-02-03 15:15 - 2018-02-03 15:15 - 000000000 ____D C:\ProgramData\Avg
2018-02-03 14:53 - 2018-02-03 14:53 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-02-03 14:53 - 2018-02-03 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-02-03 14:53 - 2018-02-03 14:53 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-02-03 14:53 - 2018-02-03 14:53 - 000000000 ____D C:\Program Files\Malwarebytes
2018-02-03 14:53 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2018-02-03 13:50 - 2018-02-03 13:50 - 000000000 ____D C:\Users\iveta\Desktop\New Folder
2018-02-03 13:35 - 2018-02-03 13:32 - 705157904 _____ (Avira GmbH) C:\Users\iveta\Desktop\rescue-system.exe
2018-02-02 12:40 - 2018-02-03 19:25 - 001070532 _____ C:\Windows\ntbtlog.txt
2018-01-14 14:47 - 2018-01-14 14:47 - 000003920 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-01-14 14:47 - 2018-01-14 14:47 - 000000000 ____D C:\Program Files\Common Files\avast software
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-02-03 19:17 - 2009-07-14 05:45 - 000031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-03 19:17 - 2009-07-14 05:45 - 000031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-03 19:10 - 2009-07-14 06:13 - 000782510 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-03 19:10 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-03 19:03 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-14 14:48 - 2015-07-18 13:11 - 000003368 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-01-14 14:47 - 2017-03-08 17:06 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-01-14 14:47 - 2011-12-08 23:18 - 000003240 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
 
==================== Files in the root of some directories =======
 
2014-03-28 20:28 - 2014-03-28 20:28 - 049940480 _____ () C:\Program Files (x86)\GUTEE74.tmp
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2014-04-01 11:06
 

 

==================== End of FRST.txt ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27.01.2018
Ran by iveta (03-02-2018 19:26:36)
Running from C:\Users\iveta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-03-22 15:29:16)
Boot Mode: Safe Mode (minimal)
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-4053589787-4222441539-3579493451-500 - Administrator - Disabled)
Guest (S-1-5-21-4053589787-4222441539-3579493451-501 - Limited - Disabled)
iveta (S-1-5-21-4053589787-4222441539-3579493451-1000 - Administrator - Enabled) => C:\Users\iveta
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{FFB768E4-E427-4553-BC36-A11F5E62A94D}) (Version: 10.1.53.64 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2214 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.22 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Driver & Application Installation (HKLM-x32\...\{BFECCF2A-F094-4066-8BFA-29CCBB7F6602}) (Version: 6.01.0930 - Lenovo)
FlatOut 2 (HKLM-x32\...\{4E6D2462-AB33-40BB-AA9F-3FA3E0DD0290}) (Version: 1.00.0000 - Empire Interactive)
Google Earth Plug-in (HKLM-x32\...\{79361740-EAE3-11E2-9911-B8AC6F98CCE3}) (Version: 7.1.1.1888 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Spoločnosť Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2312 - Intel Corporation)
ITE Infrared Transceiver (HKLM-x32\...\{40580068-9B10-40B5-9548-536CE88AB23C}) (Version: 1.00.0000 - ITE)
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.3.11.0525 - Lenovo)
Lenovo BrgVolOSD (HKLM-x32\...\{C92E0848-8CDF-451B-9622-0871EC6866F9}) (Version: 1.0.03 - Lenovo)
Lenovo Camera Fun Zone (HKLM-x32\...\motiongame) (Version: 0.8.9.3 - Tose(Shanghai) Ltd.)
Lenovo Dynamic Brightness System (HKLM-x32\...\{D9ED6D06-6002-495E-A7BC-46E6AE386996}) (Version: 4.0.01.33221 - Lenovo)
Lenovo Eye Distance System (HKLM-x32\...\{5183D7AB-D09B-411F-A74E-BBAEA61C6505}) (Version: 4.0.0032210 - Lenovo)
Lenovo Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3720 - CyberLink Corp.) Hidden
Lenovo Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3720 - CyberLink Corp.)
Lenovo Rescue System (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.1409 - CyberLink Corp.) Hidden
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.1409 - CyberLink Corp.)
Lenovo USB2.0 UVC Camera (HKLM-x32\...\{70D2C5B8-EB22-45B1-9EAA-5E8C1C408A3B}) (Version: 1.00.0000 - Vimicro Corporation)
Lenovo YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4612 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4612 - CyberLink Corp.)
LenovoUtility version 1.0 (HKLM-x32\...\{4F949BD9-1E99-40C7-9102-C67E2D384995}_is1) (Version: 1.0 - Lenovo)
LibreOffice 3.5 (HKLM-x32\...\{09D72100-CAC9-42BF-AD52-47F784C92DB6}) (Version: 3.5.2.202 - The Document Foundation)
LVT (HKLM-x32\...\{D3063097-EC84-4D21-84A4-9D852E974355}) (Version: 4.0.4.1013 - Lenovo)
Malwarebytes verzia 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Nero 7 Ultra Edition (HKLM-x32\...\{4908C75E-E5E2-43F7-B1DF-023CBA831051}) (Version: 7.02.2631 - Nero AG)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
PowerISO (HKLM-x32\...\PowerISO) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.82 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0168 - )
SRS Premium Sound Control Panel (HKLM\...\{72BF6A99-28AA-4B18-8F33-535C82F7BD00}) (Version: 1.11.3500 - SRS Labs, Inc.)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Tom Clancy's Rainbow Six Vegas (HKLM-x32\...\{5731C0A8-B266-451A-8D3F-8066AA21836F}) (Version: 1.00.000 - Ubisoft)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.0 beta 24 - Ghisler Software GmbH)
Total Commander Ultima Prime 4.9.0.0 (HKLM-x32\...\TC UP) (Version: 4.9.0.0 - ULTIMA PRIME)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2008-01-20] (PowerISO Computing, Inc.)
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2008-01-20] (PowerISO Computing, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-03-10] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2008-01-20] (PowerISO Computing, Inc.)
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {39A7BB3E-5194-48DD-AB3A-7719CA180A50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {39A7BB3E-5194-48DD-AB3A-7719CA180A50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
Task: {5EF4B85D-FFC0-4F4F-B7D6-6A172108D219} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-01] (Google Inc.)
Task: {6CE75E4A-56BE-4FC2-A0DA-B9C729D34D3A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-08-22] (Piriform Ltd)
Task: {6E3EBD80-3D4C-4ACA-96AC-EB8F444343AB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2018-01-14] (AVAST Software)
Task: {805109C0-8E30-49A3-B10F-B1D05E034CD4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-10-13] (CyberLink)
Task: {80E5D4F0-76F2-4742-9CA4-491056E63AAE} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2018-02-03] (AVAST Software)
Task: {9864FE32-4CEA-45C2-97CE-3EF449C74B10} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-01] (Google Inc.)
Task: {9D3298E7-853A-4D1B-AC91-A5A4C4C07408} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {9D3298E7-853A-4D1B-AC91-A5A4C4C07408} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {9D3298E7-853A-4D1B-AC91-A5A4C4C07408} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
Task: {B21EA15E-D680-4723-9BF2-BA56C5D49B26} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {B21EA15E-D680-4723-9BF2-BA56C5D49B26} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
Task: {C9379191-B14D-458D-A9B2-DC8735F1601B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-01-14] (AVAST Software)
Task: {F60ABBF3-9061-44AC-8CB7-9D6859FA8AA2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(1): %windir%\system32\GWX\GWXUXWorker.exe -> /ScheduleUpgradeReminderTime
Task: {F60ABBF3-9061-44AC-8CB7-9D6859FA8AA2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
==================== Loaded Modules (Whitelisted) ==============
 
2018-02-03 14:53 - 2017-11-29 09:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\iveta\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{AEF38D63-9ED5-4336-B4ED-708C5A86855B}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{1542DC94-8D4C-4740-8DC0-93BAFF803B0C}] => (Allow) LPort=2869
FirewallRules: [{82CAE3DD-B66F-4F6F-8133-95374ADE0DF7}] => (Allow) LPort=1900
FirewallRules: [{D63E4B8D-4A89-4021-A90C-5F4D8CD30F4E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{46A43795-CFE2-4DF2-9914-8439E0D5AC21}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{59150848-A381-4305-B07C-0AAD3CC72F0F}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Game.exe
FirewallRules: [{B7F40C57-BBF7-458A-BEB2-F53CCFAB2300}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Game.exe
FirewallRules: [{542DAB6F-BEDD-4C06-A625-8512D1FA9AD4}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe
FirewallRules: [{BC50FF25-1447-43B5-B44D-8D5728021FFA}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe
FirewallRules: [{4A23C16D-04C4-4E31-9810-BB2A1A6DE660}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Restore Points =========================
 
08-06-2017 18:30:57 Windows Update
09-06-2017 16:10:08 Windows Update
13-06-2017 13:19:09 Windows Update
14-06-2017 18:55:49 Windows Update
19-06-2017 15:37:32 Windows Update
25-06-2017 18:30:19 Windows Update
01-07-2017 15:36:06 Windows Update
04-07-2017 19:22:15 Windows Update
08-08-2017 14:39:44 Windows Update
08-08-2017 15:32:13 Windows Update
08-08-2017 20:01:18 Windows Update
09-08-2017 12:58:35 Windows Update
09-08-2017 13:45:39 Windows Update
05-09-2017 14:29:12 Windows Update
05-09-2017 19:57:45 Windows Update
06-09-2017 19:27:20 Windows Update
07-09-2017 14:14:39 Windows Update
07-09-2017 16:07:18 Windows Update
08-09-2017 06:56:50 Windows Update
 
==================== Faulty Device Manager Devices =============
 
Name: aswVmm
Description: aswVmm
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: aswVmm
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: aswRvrt
Description: aswRvrt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: aswRvrt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: Consumer IR Devices
Description: Consumer IR Devices
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: circlass
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (02/03/2018 07:24:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/03/2018 07:10:11 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/03/2018 07:10:11 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/03/2018 07:03:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/03/2018 04:32:02 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/03/2018 04:32:02 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/03/2018 04:26:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/03/2018 04:16:01 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/03/2018 04:16:01 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/03/2018 04:10:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
 
System errors:
=============
Error: (02/03/2018 07:25:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/03/2018 07:24:58 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
 
Error: (02/03/2018 07:24:58 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
 
Error: (02/03/2018 07:24:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Network Location Awareness, od ktorej závisí služba Network List Service, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Pentium® CPU G630 @ 2.70GHz
Percentage of memory in use: 50%
Total physical RAM: 1958.39 MB
Available physical RAM: 976.57 MB
Total Virtual: 3916.79 MB
Available Virtual: 2974.13 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:440.49 GB) (Free:340.78 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (AVIRA) (Removable) (Total:7.6 GB) (Free:7.5 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 9437F9C6)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=440.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)
 
========================================================
Disk: 1 (Size: 7.6 GB) (Disk ID: 000AD1FF)
Partition 1: (Active) - (Size=7.6 GB) - (Type=0B)
 
==================== End of Addition.txt ============================

 

Attached Files



BC AdBot (Login to Remove)

 


m

#2 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 06 February 2018 - 11:50 AM

Sorry, software Power ISO is now uninstalled.



#3 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 06 February 2018 - 07:16 PM

Hi Lustrol,
 
My name is polskamachina and I would like to :welcome: you to the Malware Removal Forum. I will be helping you with your malware issues.

What follows below are some ground rules for this forum.
 
I will reply as soon as possible (typically within 24-48 hours). In turn, I ask that you please respond within 72 hours. If you know you will be away longer than that, please let me know. I am in California at GMT-8 hours (Pacific Standard Time). If I do not respond to you within 48 hours, feel free to send me a private message.

Some points for you to keep in mind:

  • Do NOT run any tools unless instructed to do so.
  • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine. Running any additional tools may detect false positives, interfere with our tools, cause unforeseen damage, or system instability.
  • Do not attach logs or use code boxes, just copy and paste the text into your replies to me.
  • I cannot see your computer. Periodically update me on the condition of your computer, and provide as much detail as you can in every post.
  • Once things seem to be working again, please do not abandon the thread. I will give an "all-clean" message at the very end.
  • NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planned. You can put them on a CD/DVD, external drive or a flash drive, anywhere except on the computer.
  • NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. Please remember to copy the entire post so you do not miss any instructions.

Please give me some time to review your situation and I will get back to you with further instructions.
 
Let me know if you have any questions.
 
polskamachina


Member of the Bleeping Computer A.I.I. early response team!

#4 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 08 February 2018 - 11:13 AM

Hi Lustrol :)

Let's find out if your system files are in good shape:

We need to run the SFC /SCANNOW Command

The sfc /scannow command (System File Checker) scans the integrity of all protected Windows system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible.

Note: Make the appropriate backups of your system files that you have modified for theming if you wish to save them before running sfc /scannow.
Next:

  • Highlight the text below then press Ctrl-C to copy it
sfc /scannow
  • Click on the Windows Orb button
  • Type cmd
  • Right click on the search result cmd.exe and click Run as Administrator
  • Right-click in the black box and select Paste
  • Press Enter to run the command
    Note: This may take a while to finish
  • If SFC could not fix something, then run the command again to see if it may be able to the next time. Sometimes it may take running the sfc /scannow command 3 or more times to completely repair everything that's fixable
  • Retrieving SFC /scannow log
    • Higlight the text below in its entirety then press Ctrl-C
    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"
    • Click on the Windows Orb button.
    • Type cmd
    • Right click on the search result cmd.exe and select Run as Administrator
    • Right-click in the black box and select Paste
    • Press Enter to run the command.
    • A text file sfcdetails.txt should appear on your Desktop
    • Copy and paste the contents of the file into your next reply to me

Next:

  • Run FRST64
  • Copy and paste the following text into the FRST Search box:
WININET.dll
  • Click on Search Files
  • When the search has completed, a file name Search.txt will appear on your Desktop
  • Please copy and paste the contents of that file into your next reply to me

Next:

I would like to know if you can boot your system into Normal mode. If you can, please do the following:

  • Run FRST64
  • Click on Scan
  • Copy and paste the FRST and Addition logs into your next reply to me

If you are unable to boot into normal mode, at what point in the process does the system halt? Please include any error messages you see or other abnormal behavior.

In summary I will need form you:

  • sfcdetails.txt
  • Search.txt
  • FRST and Addition logs if you were able to boot to normal mode
  • If unable to boot to normal mode, describe in as much detail as possible where the system is failing

Let me know if you have any questions.

polskamachina


Member of the Bleeping Computer A.I.I. early response team!

#5 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 08 February 2018 - 12:27 PM

Hi, thanks for your support. I attach the logs in the required order. 

 

sfcdetails.txt

 

2018-02-05 18:06:17, Info                  CSI    00000009 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:17, Info                  CSI    0000000a [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:20, Info                  CSI    0000000c [SR] Verify complete
2018-02-05 18:06:23, Info                  CSI    0000000d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:23, Info                  CSI    0000000e [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:25, Info                  CSI    00000010 [SR] Verify complete
2018-02-05 18:06:27, Info                  CSI    00000011 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:27, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:30, Info                  CSI    00000014 [SR] Verify complete
2018-02-05 18:06:31, Info                  CSI    00000015 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:31, Info                  CSI    00000016 [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:34, Info                  CSI    00000018 [SR] Verify complete
2018-02-05 18:06:36, Info                  CSI    00000019 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:36, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:38, Info                  CSI    0000001c [SR] Verify complete
2018-02-05 18:06:40, Info                  CSI    0000001d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:40, Info                  CSI    0000001e [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:43, Info                  CSI    00000020 [SR] Verify complete
2018-02-05 18:06:45, Info                  CSI    00000021 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:45, Info                  CSI    00000022 [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:47, Info                  CSI    00000024 [SR] Verify complete
2018-02-05 18:06:49, Info                  CSI    00000025 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:49, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:51, Info                  CSI    00000028 [SR] Verify complete
2018-02-05 18:06:53, Info                  CSI    00000029 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:53, Info                  CSI    0000002a [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:55, Info                  CSI    0000002c [SR] Verify complete
2018-02-05 18:06:57, Info                  CSI    0000002d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:06:57, Info                  CSI    0000002e [SR] Beginning Verify and Repair transaction
2018-02-05 18:06:59, Info                  CSI    00000030 [SR] Verify complete
2018-02-05 18:07:00, Info                  CSI    00000031 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:00, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:02, Info                  CSI    00000034 [SR] Verify complete
2018-02-05 18:07:04, Info                  CSI    00000035 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:04, Info                  CSI    00000036 [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:06, Info                  CSI    00000038 [SR] Verify complete
2018-02-05 18:07:07, Info                  CSI    00000039 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:07, Info                  CSI    0000003a [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:17, Info                  CSI    0000003c [SR] Verify complete
2018-02-05 18:07:20, Info                  CSI    0000003d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:20, Info                  CSI    0000003e [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:26, Info                  CSI    00000040 [SR] Verify complete
2018-02-05 18:07:28, Info                  CSI    00000041 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:28, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:32, Info                  CSI    00000044 [SR] Verify complete
2018-02-05 18:07:34, Info                  CSI    00000045 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:34, Info                  CSI    00000046 [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:36, Info                  CSI    00000048 [SR] Verify complete
2018-02-05 18:07:37, Info                  CSI    00000049 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:37, Info                  CSI    0000004a [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:40, Info                  CSI    0000004c [SR] Verify complete
2018-02-05 18:07:41, Info                  CSI    0000004d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:41, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:45, Info                  CSI    00000050 [SR] Verify complete
2018-02-05 18:07:46, Info                  CSI    00000051 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:46, Info                  CSI    00000052 [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:48, Info                  CSI    00000054 [SR] Verify complete
2018-02-05 18:07:49, Info                  CSI    00000055 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:49, Info                  CSI    00000056 [SR] Beginning Verify and Repair transaction
2018-02-05 18:07:52, Info                  CSI    00000058 [SR] Verify complete
2018-02-05 18:07:54, Info                  CSI    00000059 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:07:54, Info                  CSI    0000005a [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:01, Info                  CSI    0000005c [SR] Verify complete
2018-02-05 18:08:01, Info                  CSI    0000005d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:01, Info                  CSI    0000005e [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:06, Info                  CSI    00000060 [SR] Verify complete
2018-02-05 18:08:07, Info                  CSI    00000061 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:07, Info                  CSI    00000062 [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:11, Info                  CSI    00000064 [SR] Verify complete
2018-02-05 18:08:12, Info                  CSI    00000065 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:12, Info                  CSI    00000066 [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:17, Info                  CSI    00000068 [SR] Verify complete
2018-02-05 18:08:18, Info                  CSI    00000069 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:18, Info                  CSI    0000006a [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:27, Info                  CSI    0000006d [SR] Verify complete
2018-02-05 18:08:28, Info                  CSI    0000006e [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:28, Info                  CSI    0000006f [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:35, Info                  CSI    00000073 [SR] Verify complete
2018-02-05 18:08:36, Info                  CSI    00000074 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:36, Info                  CSI    00000075 [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:42, Info                  CSI    00000079 [SR] Verify complete
2018-02-05 18:08:42, Info                  CSI    0000007a [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:42, Info                  CSI    0000007b [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:48, Info                  CSI    0000007d [SR] Verify complete
2018-02-05 18:08:49, Info                  CSI    0000007e [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:49, Info                  CSI    0000007f [SR] Beginning Verify and Repair transaction
2018-02-05 18:08:56, Info                  CSI    00000091 [SR] Verify complete
2018-02-05 18:08:57, Info                  CSI    00000092 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:08:57, Info                  CSI    00000093 [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:06, Info                  CSI    000000a8 [SR] Verify complete
2018-02-05 18:09:07, Info                  CSI    000000a9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:07, Info                  CSI    000000aa [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:14, Info                  CSI    000000ac [SR] Verify complete
2018-02-05 18:09:14, Info                  CSI    000000ad [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:14, Info                  CSI    000000ae [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:21, Info                  CSI    000000b0 [SR] Verify complete
2018-02-05 18:09:22, Info                  CSI    000000b1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:22, Info                  CSI    000000b2 [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:28, Info                  CSI    000000b4 [SR] Verify complete
2018-02-05 18:09:29, Info                  CSI    000000b5 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:29, Info                  CSI    000000b6 [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:33, Info                  CSI    000000b8 [SR] Verify complete
2018-02-05 18:09:33, Info                  CSI    000000b9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:33, Info                  CSI    000000ba [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:38, Info                  CSI    000000bc [SR] Verify complete
2018-02-05 18:09:38, Info                  CSI    000000bd [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:38, Info                  CSI    000000be [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:46, Info                  CSI    000000e1 [SR] Verify complete
2018-02-05 18:09:47, Info                  CSI    000000e2 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:47, Info                  CSI    000000e3 [SR] Beginning Verify and Repair transaction
2018-02-05 18:09:52, Info                  CSI    000000e5 [SR] Verify complete
2018-02-05 18:09:52, Info                  CSI    000000e6 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:09:52, Info                  CSI    000000e7 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:01, Info                  CSI    000000e9 [SR] Verify complete
2018-02-05 18:10:02, Info                  CSI    000000ea [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:02, Info                  CSI    000000eb [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:10, Info                  CSI    000000ef [SR] Verify complete
2018-02-05 18:10:10, Info                  CSI    000000f0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:10, Info                  CSI    000000f1 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:13, Info                  CSI    000000f3 [SR] Verify complete
2018-02-05 18:10:13, Info                  CSI    000000f4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:13, Info                  CSI    000000f5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:15, Info                  CSI    000000f7 [SR] Verify complete
2018-02-05 18:10:15, Info                  CSI    000000f8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:15, Info                  CSI    000000f9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:18, Info                  CSI    000000fb [SR] Verify complete
2018-02-05 18:10:18, Info                  CSI    000000fc [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:18, Info                  CSI    000000fd [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:25, Info                  CSI    00000110 [SR] Verify complete
2018-02-05 18:10:25, Info                  CSI    00000111 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:25, Info                  CSI    00000112 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:26, Info                  CSI    00000114 [SR] Verify complete
2018-02-05 18:10:26, Info                  CSI    00000115 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:26, Info                  CSI    00000116 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:28, Info                  CSI    00000118 [SR] Verify complete
2018-02-05 18:10:28, Info                  CSI    00000119 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:28, Info                  CSI    0000011a [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:30, Info                  CSI    0000011c [SR] Verify complete
2018-02-05 18:10:30, Info                  CSI    0000011d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:30, Info                  CSI    0000011e [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:35, Info                  CSI    00000120 [SR] Verify complete
2018-02-05 18:10:35, Info                  CSI    00000121 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:35, Info                  CSI    00000122 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:44, Info                  CSI    00000126 [SR] Verify complete
2018-02-05 18:10:45, Info                  CSI    00000127 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:45, Info                  CSI    00000128 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:49, Info                  CSI    0000012a [SR] Verify complete
2018-02-05 18:10:50, Info                  CSI    0000012b [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:50, Info                  CSI    0000012c [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:51, Info                  CSI    0000012e [SR] Verify complete
2018-02-05 18:10:52, Info                  CSI    0000012f [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:52, Info                  CSI    00000130 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:55, Info                  CSI    00000132 [SR] Verify complete
2018-02-05 18:10:55, Info                  CSI    00000133 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:10:55, Info                  CSI    00000134 [SR] Beginning Verify and Repair transaction
2018-02-05 18:10:59, Info                  CSI    00000136 [SR] Verify complete
2018-02-05 18:11:00, Info                  CSI    00000137 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:00, Info                  CSI    00000138 [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:02, Info                  CSI    0000013a [SR] Verify complete
2018-02-05 18:11:03, Info                  CSI    0000013b [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:03, Info                  CSI    0000013c [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:11, Info                  CSI    0000013e [SR] Verify complete
2018-02-05 18:11:11, Info                  CSI    0000013f [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:11, Info                  CSI    00000140 [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:18, Info                  CSI    00000158 [SR] Verify complete
2018-02-05 18:11:18, Info                  CSI    00000159 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:18, Info                  CSI    0000015a [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:22, Info                  CSI    0000015c [SR] Verify complete
2018-02-05 18:11:23, Info                  CSI    0000015d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:23, Info                  CSI    0000015e [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:34, Info                  CSI    00000160 [SR] Verify complete
2018-02-05 18:11:35, Info                  CSI    00000161 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:35, Info                  CSI    00000162 [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:42, Info                  CSI    00000164 [SR] Verify complete
2018-02-05 18:11:42, Info                  CSI    00000165 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:42, Info                  CSI    00000166 [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:48, Info                  CSI    00000168 [SR] Verify complete
2018-02-05 18:11:49, Info                  CSI    00000169 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:49, Info                  CSI    0000016a [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:52, Info                  CSI    0000016c [SR] Verify complete
2018-02-05 18:11:53, Info                  CSI    0000016d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:53, Info                  CSI    0000016e [SR] Beginning Verify and Repair transaction
2018-02-05 18:11:57, Info                  CSI    00000170 [SR] Verify complete
2018-02-05 18:11:57, Info                  CSI    00000171 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:11:57, Info                  CSI    00000172 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:01, Info                  CSI    00000176 [SR] Verify complete
2018-02-05 18:12:01, Info                  CSI    00000177 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:01, Info                  CSI    00000178 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:05, Info                  CSI    0000017a [SR] Verify complete
2018-02-05 18:12:05, Info                  CSI    0000017b [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:05, Info                  CSI    0000017c [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:10, Info                  CSI    0000017e [SR] Verify complete
2018-02-05 18:12:10, Info                  CSI    0000017f [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:10, Info                  CSI    00000180 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:19, Info                  CSI    00000183 [SR] Verify complete
2018-02-05 18:12:19, Info                  CSI    00000184 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:19, Info                  CSI    00000185 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:22, Info                  CSI    00000188 [SR] Verify complete
2018-02-05 18:12:23, Info                  CSI    00000189 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:23, Info                  CSI    0000018a [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:28, Info                  CSI    0000018c [SR] Verify complete
2018-02-05 18:12:28, Info                  CSI    0000018d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:28, Info                  CSI    0000018e [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:35, Info                  CSI    00000191 [SR] Verify complete
2018-02-05 18:12:35, Info                  CSI    00000192 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:35, Info                  CSI    00000193 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:39, Info                  CSI    00000195 [SR] Verify complete
2018-02-05 18:12:39, Info                  CSI    00000196 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:39, Info                  CSI    00000197 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:44, Info                  CSI    00000199 [SR] Verify complete
2018-02-05 18:12:44, Info                  CSI    0000019a [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:44, Info                  CSI    0000019b [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:47, Info                  CSI    0000019e [SR] Verify complete
2018-02-05 18:12:48, Info                  CSI    0000019f [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:48, Info                  CSI    000001a0 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:53, Info                  CSI    000001a2 [SR] Verify complete
2018-02-05 18:12:53, Info                  CSI    000001a3 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:53, Info                  CSI    000001a4 [SR] Beginning Verify and Repair transaction
2018-02-05 18:12:56, Info                  CSI    000001a7 [SR] Verify complete
2018-02-05 18:12:56, Info                  CSI    000001a8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:12:56, Info                  CSI    000001a9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:01, Info                  CSI    000001ac [SR] Verify complete
2018-02-05 18:13:01, Info                  CSI    000001ad [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:01, Info                  CSI    000001ae [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:06, Info                  CSI    000001b0 [SR] Verify complete
2018-02-05 18:13:06, Info                  CSI    000001b1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:06, Info                  CSI    000001b2 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:11, Info                  CSI    000001b6 [SR] Verify complete
2018-02-05 18:13:11, Info                  CSI    000001b7 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:11, Info                  CSI    000001b8 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:16, Info                  CSI    000001ba [SR] Verify complete
2018-02-05 18:13:17, Info                  CSI    000001bb [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:17, Info                  CSI    000001bc [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:22, Info                  CSI    000001bf [SR] Verify complete
2018-02-05 18:13:22, Info                  CSI    000001c0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:22, Info                  CSI    000001c1 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:24, Info                  CSI    000001c3 [SR] Verify complete
2018-02-05 18:13:24, Info                  CSI    000001c4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:24, Info                  CSI    000001c5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:26, Info                  CSI    000001c7 [SR] Verify complete
2018-02-05 18:13:26, Info                  CSI    000001c8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:26, Info                  CSI    000001c9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:30, Info                  CSI    000001cb [SR] Verify complete
2018-02-05 18:13:31, Info                  CSI    000001cc [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:31, Info                  CSI    000001cd [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:35, Info                  CSI    000001cf [SR] Verify complete
2018-02-05 18:13:36, Info                  CSI    000001d0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:36, Info                  CSI    000001d1 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:42, Info                  CSI    000001d3 [SR] Verify complete
2018-02-05 18:13:42, Info                  CSI    000001d4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:42, Info                  CSI    000001d5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:44, Info                  CSI    000001d7 [SR] Verify complete
2018-02-05 18:13:45, Info                  CSI    000001d8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:45, Info                  CSI    000001d9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:49, Info                  CSI    000001db [SR] Verify complete
2018-02-05 18:13:49, Info                  CSI    000001dc [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:49, Info                  CSI    000001dd [SR] Beginning Verify and Repair transaction
2018-02-05 18:13:57, Info                  CSI    000001df [SR] Verify complete
2018-02-05 18:13:57, Info                  CSI    000001e0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:13:57, Info                  CSI    000001e1 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:06, Info                  CSI    000001e3 [SR] Verify complete
2018-02-05 18:14:06, Info                  CSI    000001e4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:06, Info                  CSI    000001e5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:10, Info                  CSI    000001e7 [SR] Verify complete
2018-02-05 18:14:10, Info                  CSI    000001e8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:10, Info                  CSI    000001e9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:12, Info                  CSI    000001eb [SR] Verify complete
2018-02-05 18:14:13, Info                  CSI    000001ec [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:13, Info                  CSI    000001ed [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:15, Info                  CSI    000001ef [SR] Verify complete
2018-02-05 18:14:15, Info                  CSI    000001f0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:15, Info                  CSI    000001f1 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:18, Info                  CSI    000001f3 [SR] Verify complete
2018-02-05 18:14:18, Info                  CSI    000001f4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:18, Info                  CSI    000001f5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:22, Info                  CSI    000001f7 [SR] Verify complete
2018-02-05 18:14:22, Info                  CSI    000001f8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:22, Info                  CSI    000001f9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:23, Info                  CSI    000001fb [SR] Verify complete
2018-02-05 18:14:24, Info                  CSI    000001fc [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:24, Info                  CSI    000001fd [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:25, Info                  CSI    000001ff [SR] Verify complete
2018-02-05 18:14:25, Info                  CSI    00000200 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:25, Info                  CSI    00000201 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:30, Info                  CSI    00000209 [SR] Verify complete
2018-02-05 18:14:30, Info                  CSI    0000020a [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:30, Info                  CSI    0000020b [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:32, Info                  CSI    0000020d [SR] Verify complete
2018-02-05 18:14:33, Info                  CSI    0000020e [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:33, Info                  CSI    0000020f [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:35, Info                  CSI    00000211 [SR] Verify complete
2018-02-05 18:14:35, Info                  CSI    00000212 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:35, Info                  CSI    00000213 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:39, Info                  CSI    00000215 [SR] Verify complete
2018-02-05 18:14:39, Info                  CSI    00000216 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:39, Info                  CSI    00000217 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:44, Info                  CSI    00000219 [SR] Verify complete
2018-02-05 18:14:44, Info                  CSI    0000021a [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:44, Info                  CSI    0000021b [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:49, Info                  CSI    0000021e [SR] Verify complete
2018-02-05 18:14:50, Info                  CSI    0000021f [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:50, Info                  CSI    00000220 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:51, Info                  CSI    00000222 [SR] Verify complete
2018-02-05 18:14:51, Info                  CSI    00000223 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:51, Info                  CSI    00000224 [SR] Beginning Verify and Repair transaction
2018-02-05 18:14:52, Info                  CSI    00000226 [SR] Verify complete
2018-02-05 18:14:52, Info                  CSI    00000227 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:14:52, Info                  CSI    00000228 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:02, Info                  CSI    0000022d [SR] Verify complete
2018-02-05 18:15:02, Info                  CSI    0000022e [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:02, Info                  CSI    0000022f [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:09, Info                  CSI    00000232 [SR] Verify complete
2018-02-05 18:15:09, Info                  CSI    00000233 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:09, Info                  CSI    00000234 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:14, Info                  CSI    00000238 [SR] Verify complete
2018-02-05 18:15:14, Info                  CSI    00000239 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:14, Info                  CSI    0000023a [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:20, Info                  CSI    00000245 [SR] Verify complete
2018-02-05 18:15:20, Info                  CSI    00000246 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:20, Info                  CSI    00000247 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:26, Info                  CSI    0000024e [SR] Verify complete
2018-02-05 18:15:27, Info                  CSI    0000024f [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:27, Info                  CSI    00000250 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:31, Info                  CSI    00000252 [SR] Verify complete
2018-02-05 18:15:31, Info                  CSI    00000253 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:31, Info                  CSI    00000254 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:34, Info                  CSI    00000258 [SR] Verify complete
2018-02-05 18:15:34, Info                  CSI    00000259 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:34, Info                  CSI    0000025a [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:37, Info                  CSI    0000025c [SR] Verify complete
2018-02-05 18:15:38, Info                  CSI    0000025d [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:38, Info                  CSI    0000025e [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:41, Info                  CSI    00000283 [SR] Verify complete
2018-02-05 18:15:42, Info                  CSI    00000284 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:42, Info                  CSI    00000285 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:46, Info                  CSI    00000287 [SR] Verify complete
2018-02-05 18:15:46, Info                  CSI    00000288 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:46, Info                  CSI    00000289 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:49, Info                  CSI    0000028b [SR] Verify complete
2018-02-05 18:15:49, Info                  CSI    0000028c [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:49, Info                  CSI    0000028d [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:53, Info                  CSI    0000028f [SR] Verify complete
2018-02-05 18:15:53, Info                  CSI    00000290 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:53, Info                  CSI    00000291 [SR] Beginning Verify and Repair transaction
2018-02-05 18:15:57, Info                  CSI    0000029f [SR] Verify complete
2018-02-05 18:15:57, Info                  CSI    000002a0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:15:57, Info                  CSI    000002a1 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:01, Info                  CSI    000002a3 [SR] Verify complete
2018-02-05 18:16:01, Info                  CSI    000002a4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:01, Info                  CSI    000002a5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:06, Info                  CSI    000002b3 [SR] Verify complete
2018-02-05 18:16:06, Info                  CSI    000002b4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:06, Info                  CSI    000002b5 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:08, Info                  CSI    000002b7 [SR] Verify complete
2018-02-05 18:16:08, Info                  CSI    000002b8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:08, Info                  CSI    000002b9 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:11, Info                  CSI    000002bb [SR] Verify complete
2018-02-05 18:16:11, Info                  CSI    000002bc [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:11, Info                  CSI    000002bd [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:17, Info                  CSI    000002c0 [SR] Verify complete
2018-02-05 18:16:18, Info                  CSI    000002c1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:18, Info                  CSI    000002c2 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:19, Info                  CSI    000002c4 [SR] Verify complete
2018-02-05 18:16:19, Info                  CSI    000002c5 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:19, Info                  CSI    000002c6 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:22, Info                  CSI    000002c8 [SR] Verify complete
2018-02-05 18:16:22, Info                  CSI    000002c9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:22, Info                  CSI    000002ca [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:25, Info                  CSI    000002cc [SR] Verify complete
2018-02-05 18:16:26, Info                  CSI    000002cd [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:26, Info                  CSI    000002ce [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:29, Info                  CSI    000002d0 [SR] Verify complete
2018-02-05 18:16:29, Info                  CSI    000002d1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:29, Info                  CSI    000002d2 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:35, Info                  CSI    000002ec [SR] Verify complete
2018-02-05 18:16:35, Info                  CSI    000002ed [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:35, Info                  CSI    000002ee [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:47, Info                  CSI    000002f0 [SR] Verify complete
2018-02-05 18:16:47, Info                  CSI    000002f1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:47, Info                  CSI    000002f2 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:50, Info                  CSI    000002f4 [SR] Verify complete
2018-02-05 18:16:51, Info                  CSI    000002f5 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:51, Info                  CSI    000002f6 [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:54, Info                  CSI    000002f8 [SR] Verify complete
2018-02-05 18:16:54, Info                  CSI    000002f9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:54, Info                  CSI    000002fa [SR] Beginning Verify and Repair transaction
2018-02-05 18:16:56, Info                  CSI    000002fe [SR] Verify complete
2018-02-05 18:16:57, Info                  CSI    000002ff [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:16:57, Info                  CSI    00000300 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:00, Info                  CSI    00000302 [SR] Verify complete
2018-02-05 18:17:00, Info                  CSI    00000303 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:00, Info                  CSI    00000304 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:04, Info                  CSI    00000306 [SR] Verify complete
2018-02-05 18:17:04, Info                  CSI    00000307 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:04, Info                  CSI    00000308 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:07, Info                  CSI    0000030a [SR] Verify complete
2018-02-05 18:17:07, Info                  CSI    0000030b [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:07, Info                  CSI    0000030c [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:10, Info                  CSI    0000030f [SR] Verify complete
2018-02-05 18:17:11, Info                  CSI    00000310 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:11, Info                  CSI    00000311 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:14, Info                  CSI    00000313 [SR] Verify complete
2018-02-05 18:17:14, Info                  CSI    00000314 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:14, Info                  CSI    00000315 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:17, Info                  CSI    00000317 [SR] Verify complete
2018-02-05 18:17:18, Info                  CSI    00000318 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:18, Info                  CSI    00000319 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:21, Info                  CSI    0000031b [SR] Verify complete
2018-02-05 18:17:22, Info                  CSI    0000031c [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:22, Info                  CSI    0000031d [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:25, Info                  CSI    00000320 [SR] Verify complete
2018-02-05 18:17:26, Info                  CSI    00000321 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:26, Info                  CSI    00000322 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:29, Info                  CSI    00000324 [SR] Verify complete
2018-02-05 18:17:30, Info                  CSI    00000325 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:30, Info                  CSI    00000326 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:34, Info                  CSI    00000328 [SR] Verify complete
2018-02-05 18:17:35, Info                  CSI    00000329 [SR] Verifying 100 (0x0000000000000064) components
2018-02-05 18:17:35, Info                  CSI    0000032a [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:38, Info                  CSI    0000032c [SR] Verify complete
2018-02-05 18:17:39, Info                  CSI    0000032d [SR] Verifying 87 (0x0000000000000057) components
2018-02-05 18:17:39, Info                  CSI    0000032e [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:42, Info                  CSI    00000330 [SR] Verify complete
2018-02-05 18:17:42, Info                  CSI    00000331 [SR] Repairing 0 components
2018-02-05 18:17:42, Info                  CSI    00000332 [SR] Beginning Verify and Repair transaction
2018-02-05 18:17:42, Info                  CSI    00000334 [SR] Repair complete
2018-02-08 17:39:41, Info                  CSI    00000009 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:39:41, Info                  CSI    0000000a [SR] Beginning Verify and Repair transaction
2018-02-08 17:39:45, Info                  CSI    0000000c [SR] Verify complete
2018-02-08 17:39:49, Info                  CSI    0000000d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:39:49, Info                  CSI    0000000e [SR] Beginning Verify and Repair transaction
2018-02-08 17:39:53, Info                  CSI    00000010 [SR] Verify complete
2018-02-08 17:39:57, Info                  CSI    00000011 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:39:57, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:01, Info                  CSI    00000014 [SR] Verify complete
2018-02-08 17:40:04, Info                  CSI    00000015 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:04, Info                  CSI    00000016 [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:08, Info                  CSI    00000018 [SR] Verify complete
2018-02-08 17:40:12, Info                  CSI    00000019 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:12, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:15, Info                  CSI    0000001c [SR] Verify complete
2018-02-08 17:40:17, Info                  CSI    0000001d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:17, Info                  CSI    0000001e [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:21, Info                  CSI    00000020 [SR] Verify complete
2018-02-08 17:40:23, Info                  CSI    00000021 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:23, Info                  CSI    00000022 [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:25, Info                  CSI    00000024 [SR] Verify complete
2018-02-08 17:40:27, Info                  CSI    00000025 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:27, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:30, Info                  CSI    00000028 [SR] Verify complete
2018-02-08 17:40:32, Info                  CSI    00000029 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:32, Info                  CSI    0000002a [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:35, Info                  CSI    0000002c [SR] Verify complete
2018-02-08 17:40:39, Info                  CSI    0000002d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:39, Info                  CSI    0000002e [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:42, Info                  CSI    00000030 [SR] Verify complete
2018-02-08 17:40:44, Info                  CSI    00000031 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:44, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:46, Info                  CSI    00000034 [SR] Verify complete
2018-02-08 17:40:48, Info                  CSI    00000035 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:48, Info                  CSI    00000036 [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:51, Info                  CSI    00000038 [SR] Verify complete
2018-02-08 17:40:52, Info                  CSI    00000039 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:52, Info                  CSI    0000003a [SR] Beginning Verify and Repair transaction
2018-02-08 17:40:55, Info                  CSI    0000003c [SR] Verify complete
2018-02-08 17:40:57, Info                  CSI    0000003d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:40:57, Info                  CSI    0000003e [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:01, Info                  CSI    00000040 [SR] Verify complete
2018-02-08 17:41:02, Info                  CSI    00000041 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:02, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:06, Info                  CSI    00000044 [SR] Verify complete
2018-02-08 17:41:07, Info                  CSI    00000045 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:07, Info                  CSI    00000046 [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:09, Info                  CSI    00000048 [SR] Verify complete
2018-02-08 17:41:10, Info                  CSI    00000049 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:10, Info                  CSI    0000004a [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:13, Info                  CSI    0000004c [SR] Verify complete
2018-02-08 17:41:15, Info                  CSI    0000004d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:15, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:21, Info                  CSI    00000050 [SR] Verify complete
2018-02-08 17:41:22, Info                  CSI    00000051 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:22, Info                  CSI    00000052 [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:25, Info                  CSI    00000054 [SR] Verify complete
2018-02-08 17:41:26, Info                  CSI    00000055 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:26, Info                  CSI    00000056 [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:28, Info                  CSI    00000058 [SR] Verify complete
2018-02-08 17:41:28, Info                  CSI    00000059 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:28, Info                  CSI    0000005a [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:33, Info                  CSI    0000005c [SR] Verify complete
2018-02-08 17:41:33, Info                  CSI    0000005d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:33, Info                  CSI    0000005e [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:37, Info                  CSI    00000060 [SR] Verify complete
2018-02-08 17:41:37, Info                  CSI    00000061 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:37, Info                  CSI    00000062 [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:41, Info                  CSI    00000064 [SR] Verify complete
2018-02-08 17:41:43, Info                  CSI    00000065 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:43, Info                  CSI    00000066 [SR] Beginning Verify and Repair transaction
2018-02-08 17:41:49, Info                  CSI    00000068 [SR] Verify complete
2018-02-08 17:41:50, Info                  CSI    00000069 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:41:50, Info                  CSI    0000006a [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:00, Info                  CSI    0000006d [SR] Verify complete
2018-02-08 17:42:01, Info                  CSI    0000006e [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:01, Info                  CSI    0000006f [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:08, Info                  CSI    00000073 [SR] Verify complete
2018-02-08 17:42:09, Info                  CSI    00000074 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:09, Info                  CSI    00000075 [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:14, Info                  CSI    00000079 [SR] Verify complete
2018-02-08 17:42:15, Info                  CSI    0000007a [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:15, Info                  CSI    0000007b [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:21, Info                  CSI    0000007d [SR] Verify complete
2018-02-08 17:42:22, Info                  CSI    0000007e [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:22, Info                  CSI    0000007f [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:31, Info                  CSI    00000091 [SR] Verify complete
2018-02-08 17:42:32, Info                  CSI    00000092 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:32, Info                  CSI    00000093 [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:42, Info                  CSI    000000a8 [SR] Verify complete
2018-02-08 17:42:43, Info                  CSI    000000a9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:43, Info                  CSI    000000aa [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:50, Info                  CSI    000000ac [SR] Verify complete
2018-02-08 17:42:51, Info                  CSI    000000ad [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:51, Info                  CSI    000000ae [SR] Beginning Verify and Repair transaction
2018-02-08 17:42:58, Info                  CSI    000000b0 [SR] Verify complete
2018-02-08 17:42:59, Info                  CSI    000000b1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:42:59, Info                  CSI    000000b2 [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:06, Info                  CSI    000000b4 [SR] Verify complete
2018-02-08 17:43:06, Info                  CSI    000000b5 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:06, Info                  CSI    000000b6 [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:14, Info                  CSI    000000b8 [SR] Verify complete
2018-02-08 17:43:14, Info                  CSI    000000b9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:14, Info                  CSI    000000ba [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:21, Info                  CSI    000000bc [SR] Verify complete
2018-02-08 17:43:21, Info                  CSI    000000bd [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:21, Info                  CSI    000000be [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:31, Info                  CSI    000000e1 [SR] Verify complete
2018-02-08 17:43:32, Info                  CSI    000000e2 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:32, Info                  CSI    000000e3 [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:37, Info                  CSI    000000e5 [SR] Verify complete
2018-02-08 17:43:37, Info                  CSI    000000e6 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:37, Info                  CSI    000000e7 [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:46, Info                  CSI    000000e9 [SR] Verify complete
2018-02-08 17:43:46, Info                  CSI    000000ea [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:46, Info                  CSI    000000eb [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:53, Info                  CSI    000000ef [SR] Verify complete
2018-02-08 17:43:53, Info                  CSI    000000f0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:53, Info                  CSI    000000f1 [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:56, Info                  CSI    000000f3 [SR] Verify complete
2018-02-08 17:43:56, Info                  CSI    000000f4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:56, Info                  CSI    000000f5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:43:57, Info                  CSI    000000f7 [SR] Verify complete
2018-02-08 17:43:57, Info                  CSI    000000f8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:43:57, Info                  CSI    000000f9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:00, Info                  CSI    000000fb [SR] Verify complete
2018-02-08 17:44:00, Info                  CSI    000000fc [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:00, Info                  CSI    000000fd [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:07, Info                  CSI    00000110 [SR] Verify complete
2018-02-08 17:44:07, Info                  CSI    00000111 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:07, Info                  CSI    00000112 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:07, Info                  CSI    00000114 [SR] Verify complete
2018-02-08 17:44:08, Info                  CSI    00000115 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:08, Info                  CSI    00000116 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:09, Info                  CSI    00000118 [SR] Verify complete
2018-02-08 17:44:09, Info                  CSI    00000119 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:09, Info                  CSI    0000011a [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:11, Info                  CSI    0000011c [SR] Verify complete
2018-02-08 17:44:11, Info                  CSI    0000011d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:11, Info                  CSI    0000011e [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:16, Info                  CSI    00000120 [SR] Verify complete
2018-02-08 17:44:16, Info                  CSI    00000121 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:16, Info                  CSI    00000122 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:26, Info                  CSI    00000126 [SR] Verify complete
2018-02-08 17:44:26, Info                  CSI    00000127 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:26, Info                  CSI    00000128 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:31, Info                  CSI    0000012a [SR] Verify complete
2018-02-08 17:44:31, Info                  CSI    0000012b [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:31, Info                  CSI    0000012c [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:32, Info                  CSI    0000012e [SR] Verify complete
2018-02-08 17:44:33, Info                  CSI    0000012f [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:33, Info                  CSI    00000130 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:36, Info                  CSI    00000132 [SR] Verify complete
2018-02-08 17:44:36, Info                  CSI    00000133 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:36, Info                  CSI    00000134 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:40, Info                  CSI    00000136 [SR] Verify complete
2018-02-08 17:44:40, Info                  CSI    00000137 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:40, Info                  CSI    00000138 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:43, Info                  CSI    0000013a [SR] Verify complete
2018-02-08 17:44:44, Info                  CSI    0000013b [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:44, Info                  CSI    0000013c [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:51, Info                  CSI    0000013e [SR] Verify complete
2018-02-08 17:44:52, Info                  CSI    0000013f [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:52, Info                  CSI    00000140 [SR] Beginning Verify and Repair transaction
2018-02-08 17:44:58, Info                  CSI    00000158 [SR] Verify complete
2018-02-08 17:44:58, Info                  CSI    00000159 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:44:58, Info                  CSI    0000015a [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:02, Info                  CSI    0000015c [SR] Verify complete
2018-02-08 17:45:02, Info                  CSI    0000015d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:02, Info                  CSI    0000015e [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:14, Info                  CSI    00000160 [SR] Verify complete
2018-02-08 17:45:14, Info                  CSI    00000161 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:14, Info                  CSI    00000162 [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:20, Info                  CSI    00000164 [SR] Verify complete
2018-02-08 17:45:21, Info                  CSI    00000165 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:21, Info                  CSI    00000166 [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:27, Info                  CSI    00000168 [SR] Verify complete
2018-02-08 17:45:27, Info                  CSI    00000169 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:27, Info                  CSI    0000016a [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:31, Info                  CSI    0000016c [SR] Verify complete
2018-02-08 17:45:31, Info                  CSI    0000016d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:31, Info                  CSI    0000016e [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:35, Info                  CSI    00000170 [SR] Verify complete
2018-02-08 17:45:36, Info                  CSI    00000171 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:36, Info                  CSI    00000172 [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:39, Info                  CSI    00000176 [SR] Verify complete
2018-02-08 17:45:39, Info                  CSI    00000177 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:39, Info                  CSI    00000178 [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:42, Info                  CSI    0000017a [SR] Verify complete
2018-02-08 17:45:43, Info                  CSI    0000017b [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:43, Info                  CSI    0000017c [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:48, Info                  CSI    0000017e [SR] Verify complete
2018-02-08 17:45:48, Info                  CSI    0000017f [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:48, Info                  CSI    00000180 [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:55, Info                  CSI    00000183 [SR] Verify complete
2018-02-08 17:45:56, Info                  CSI    00000184 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:56, Info                  CSI    00000185 [SR] Beginning Verify and Repair transaction
2018-02-08 17:45:59, Info                  CSI    00000188 [SR] Verify complete
2018-02-08 17:45:59, Info                  CSI    00000189 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:45:59, Info                  CSI    0000018a [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:04, Info                  CSI    0000018c [SR] Verify complete
2018-02-08 17:46:04, Info                  CSI    0000018d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:04, Info                  CSI    0000018e [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:11, Info                  CSI    00000191 [SR] Verify complete
2018-02-08 17:46:11, Info                  CSI    00000192 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:11, Info                  CSI    00000193 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:14, Info                  CSI    00000195 [SR] Verify complete
2018-02-08 17:46:15, Info                  CSI    00000196 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:15, Info                  CSI    00000197 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:19, Info                  CSI    00000199 [SR] Verify complete
2018-02-08 17:46:19, Info                  CSI    0000019a [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:19, Info                  CSI    0000019b [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:23, Info                  CSI    0000019e [SR] Verify complete
2018-02-08 17:46:23, Info                  CSI    0000019f [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:23, Info                  CSI    000001a0 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:29, Info                  CSI    000001a2 [SR] Verify complete
2018-02-08 17:46:29, Info                  CSI    000001a3 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:29, Info                  CSI    000001a4 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:32, Info                  CSI    000001a7 [SR] Verify complete
2018-02-08 17:46:32, Info                  CSI    000001a8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:32, Info                  CSI    000001a9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:36, Info                  CSI    000001ac [SR] Verify complete
2018-02-08 17:46:36, Info                  CSI    000001ad [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:36, Info                  CSI    000001ae [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:41, Info                  CSI    000001b0 [SR] Verify complete
2018-02-08 17:46:41, Info                  CSI    000001b1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:41, Info                  CSI    000001b2 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:46, Info                  CSI    000001b6 [SR] Verify complete
2018-02-08 17:46:46, Info                  CSI    000001b7 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:46, Info                  CSI    000001b8 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:51, Info                  CSI    000001ba [SR] Verify complete
2018-02-08 17:46:51, Info                  CSI    000001bb [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:51, Info                  CSI    000001bc [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:56, Info                  CSI    000001bf [SR] Verify complete
2018-02-08 17:46:56, Info                  CSI    000001c0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:56, Info                  CSI    000001c1 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:58, Info                  CSI    000001c3 [SR] Verify complete
2018-02-08 17:46:58, Info                  CSI    000001c4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:46:58, Info                  CSI    000001c5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:46:59, Info                  CSI    000001c7 [SR] Verify complete
2018-02-08 17:47:00, Info                  CSI    000001c8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:00, Info                  CSI    000001c9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:03, Info                  CSI    000001cb [SR] Verify complete
2018-02-08 17:47:03, Info                  CSI    000001cc [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:03, Info                  CSI    000001cd [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:08, Info                  CSI    000001cf [SR] Verify complete
2018-02-08 17:47:08, Info                  CSI    000001d0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:08, Info                  CSI    000001d1 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:14, Info                  CSI    000001d3 [SR] Verify complete
2018-02-08 17:47:15, Info                  CSI    000001d4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:15, Info                  CSI    000001d5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:17, Info                  CSI    000001d7 [SR] Verify complete
2018-02-08 17:47:17, Info                  CSI    000001d8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:17, Info                  CSI    000001d9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:20, Info                  CSI    000001db [SR] Verify complete
2018-02-08 17:47:20, Info                  CSI    000001dc [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:20, Info                  CSI    000001dd [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:27, Info                  CSI    000001df [SR] Verify complete
2018-02-08 17:47:27, Info                  CSI    000001e0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:27, Info                  CSI    000001e1 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:34, Info                  CSI    000001e3 [SR] Verify complete
2018-02-08 17:47:35, Info                  CSI    000001e4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:35, Info                  CSI    000001e5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:37, Info                  CSI    000001e7 [SR] Verify complete
2018-02-08 17:47:37, Info                  CSI    000001e8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:37, Info                  CSI    000001e9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:40, Info                  CSI    000001eb [SR] Verify complete
2018-02-08 17:47:40, Info                  CSI    000001ec [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:40, Info                  CSI    000001ed [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:42, Info                  CSI    000001ef [SR] Verify complete
2018-02-08 17:47:42, Info                  CSI    000001f0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:42, Info                  CSI    000001f1 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:45, Info                  CSI    000001f3 [SR] Verify complete
2018-02-08 17:47:45, Info                  CSI    000001f4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:45, Info                  CSI    000001f5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:48, Info                  CSI    000001f7 [SR] Verify complete
2018-02-08 17:47:48, Info                  CSI    000001f8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:48, Info                  CSI    000001f9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:49, Info                  CSI    000001fb [SR] Verify complete
2018-02-08 17:47:49, Info                  CSI    000001fc [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:49, Info                  CSI    000001fd [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:50, Info                  CSI    000001ff [SR] Verify complete
2018-02-08 17:47:51, Info                  CSI    00000200 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:51, Info                  CSI    00000201 [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:55, Info                  CSI    00000209 [SR] Verify complete
2018-02-08 17:47:55, Info                  CSI    0000020a [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:55, Info                  CSI    0000020b [SR] Beginning Verify and Repair transaction
2018-02-08 17:47:58, Info                  CSI    0000020d [SR] Verify complete
2018-02-08 17:47:58, Info                  CSI    0000020e [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:47:58, Info                  CSI    0000020f [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:00, Info                  CSI    00000211 [SR] Verify complete
2018-02-08 17:48:00, Info                  CSI    00000212 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:00, Info                  CSI    00000213 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:04, Info                  CSI    00000215 [SR] Verify complete
2018-02-08 17:48:04, Info                  CSI    00000216 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:04, Info                  CSI    00000217 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:09, Info                  CSI    00000219 [SR] Verify complete
2018-02-08 17:48:09, Info                  CSI    0000021a [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:09, Info                  CSI    0000021b [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:14, Info                  CSI    0000021e [SR] Verify complete
2018-02-08 17:48:14, Info                  CSI    0000021f [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:14, Info                  CSI    00000220 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:15, Info                  CSI    00000222 [SR] Verify complete
2018-02-08 17:48:15, Info                  CSI    00000223 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:15, Info                  CSI    00000224 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:16, Info                  CSI    00000226 [SR] Verify complete
2018-02-08 17:48:16, Info                  CSI    00000227 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:16, Info                  CSI    00000228 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:25, Info                  CSI    0000022d [SR] Verify complete
2018-02-08 17:48:26, Info                  CSI    0000022e [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:26, Info                  CSI    0000022f [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:32, Info                  CSI    00000232 [SR] Verify complete
2018-02-08 17:48:33, Info                  CSI    00000233 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:33, Info                  CSI    00000234 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:37, Info                  CSI    00000238 [SR] Verify complete
2018-02-08 17:48:38, Info                  CSI    00000239 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:38, Info                  CSI    0000023a [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:43, Info                  CSI    00000245 [SR] Verify complete
2018-02-08 17:48:43, Info                  CSI    00000246 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:43, Info                  CSI    00000247 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:49, Info                  CSI    0000024e [SR] Verify complete
2018-02-08 17:48:49, Info                  CSI    0000024f [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:49, Info                  CSI    00000250 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:53, Info                  CSI    00000252 [SR] Verify complete
2018-02-08 17:48:53, Info                  CSI    00000253 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:53, Info                  CSI    00000254 [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:56, Info                  CSI    00000258 [SR] Verify complete
2018-02-08 17:48:56, Info                  CSI    00000259 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:56, Info                  CSI    0000025a [SR] Beginning Verify and Repair transaction
2018-02-08 17:48:59, Info                  CSI    0000025c [SR] Verify complete
2018-02-08 17:48:59, Info                  CSI    0000025d [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:48:59, Info                  CSI    0000025e [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:03, Info                  CSI    00000283 [SR] Verify complete
2018-02-08 17:49:03, Info                  CSI    00000284 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:03, Info                  CSI    00000285 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:07, Info                  CSI    00000287 [SR] Verify complete
2018-02-08 17:49:07, Info                  CSI    00000288 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:07, Info                  CSI    00000289 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:09, Info                  CSI    0000028b [SR] Verify complete
2018-02-08 17:49:10, Info                  CSI    0000028c [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:10, Info                  CSI    0000028d [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:13, Info                  CSI    0000028f [SR] Verify complete
2018-02-08 17:49:13, Info                  CSI    00000290 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:13, Info                  CSI    00000291 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:16, Info                  CSI    0000029f [SR] Verify complete
2018-02-08 17:49:17, Info                  CSI    000002a0 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:17, Info                  CSI    000002a1 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:20, Info                  CSI    000002a3 [SR] Verify complete
2018-02-08 17:49:20, Info                  CSI    000002a4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:20, Info                  CSI    000002a5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:25, Info                  CSI    000002b3 [SR] Verify complete
2018-02-08 17:49:25, Info                  CSI    000002b4 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:25, Info                  CSI    000002b5 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:26, Info                  CSI    000002b7 [SR] Verify complete
2018-02-08 17:49:27, Info                  CSI    000002b8 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:27, Info                  CSI    000002b9 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:29, Info                  CSI    000002bb [SR] Verify complete
2018-02-08 17:49:30, Info                  CSI    000002bc [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:30, Info                  CSI    000002bd [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:35, Info                  CSI    000002c0 [SR] Verify complete
2018-02-08 17:49:36, Info                  CSI    000002c1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:36, Info                  CSI    000002c2 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:37, Info                  CSI    000002c4 [SR] Verify complete
2018-02-08 17:49:37, Info                  CSI    000002c5 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:37, Info                  CSI    000002c6 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:39, Info                  CSI    000002c8 [SR] Verify complete
2018-02-08 17:49:40, Info                  CSI    000002c9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:40, Info                  CSI    000002ca [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:42, Info                  CSI    000002cc [SR] Verify complete
2018-02-08 17:49:43, Info                  CSI    000002cd [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:43, Info                  CSI    000002ce [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:45, Info                  CSI    000002d0 [SR] Verify complete
2018-02-08 17:49:46, Info                  CSI    000002d1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:46, Info                  CSI    000002d2 [SR] Beginning Verify and Repair transaction
2018-02-08 17:49:51, Info                  CSI    000002ec [SR] Verify complete
2018-02-08 17:49:51, Info                  CSI    000002ed [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:49:51, Info                  CSI    000002ee [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:01, Info                  CSI    000002f0 [SR] Verify complete
2018-02-08 17:50:01, Info                  CSI    000002f1 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:01, Info                  CSI    000002f2 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:05, Info                  CSI    000002f4 [SR] Verify complete
2018-02-08 17:50:05, Info                  CSI    000002f5 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:05, Info                  CSI    000002f6 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:07, Info                  CSI    000002f8 [SR] Verify complete
2018-02-08 17:50:08, Info                  CSI    000002f9 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:08, Info                  CSI    000002fa [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:10, Info                  CSI    000002fe [SR] Verify complete
2018-02-08 17:50:10, Info                  CSI    000002ff [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:10, Info                  CSI    00000300 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:13, Info                  CSI    00000302 [SR] Verify complete
2018-02-08 17:50:13, Info                  CSI    00000303 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:13, Info                  CSI    00000304 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:17, Info                  CSI    00000306 [SR] Verify complete
2018-02-08 17:50:17, Info                  CSI    00000307 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:17, Info                  CSI    00000308 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:19, Info                  CSI    0000030a [SR] Verify complete
2018-02-08 17:50:19, Info                  CSI    0000030b [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:19, Info                  CSI    0000030c [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:22, Info                  CSI    0000030f [SR] Verify complete
2018-02-08 17:50:22, Info                  CSI    00000310 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:22, Info                  CSI    00000311 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:25, Info                  CSI    00000313 [SR] Verify complete
2018-02-08 17:50:25, Info                  CSI    00000314 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:25, Info                  CSI    00000315 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:28, Info                  CSI    00000317 [SR] Verify complete
2018-02-08 17:50:29, Info                  CSI    00000318 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:29, Info                  CSI    00000319 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:32, Info                  CSI    0000031b [SR] Verify complete
2018-02-08 17:50:32, Info                  CSI    0000031c [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:32, Info                  CSI    0000031d [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:36, Info                  CSI    00000320 [SR] Verify complete
2018-02-08 17:50:36, Info                  CSI    00000321 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:36, Info                  CSI    00000322 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:40, Info                  CSI    00000324 [SR] Verify complete
2018-02-08 17:50:40, Info                  CSI    00000325 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:40, Info                  CSI    00000326 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:44, Info                  CSI    00000328 [SR] Verify complete
2018-02-08 17:50:45, Info                  CSI    00000329 [SR] Verifying 100 (0x0000000000000064) components
2018-02-08 17:50:45, Info                  CSI    0000032a [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:48, Info                  CSI    0000032c [SR] Verify complete
2018-02-08 17:50:48, Info                  CSI    0000032d [SR] Verifying 87 (0x0000000000000057) components
2018-02-08 17:50:48, Info                  CSI    0000032e [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:51, Info                  CSI    00000330 [SR] Verify complete
2018-02-08 17:50:51, Info                  CSI    00000331 [SR] Repairing 0 components
2018-02-08 17:50:51, Info                  CSI    00000332 [SR] Beginning Verify and Repair transaction
2018-02-08 17:50:51, Info                  CSI    00000334 [SR] Repair complete
 
Search.txt
 
Farbar Recovery Scan Tool (x64) Version: 27.01.2018
Ran by iveta (08-02-2018 17:53:48)
Running from C:\Users\iveta\Desktop
Boot Mode: Safe Mode (with Networking)
 
================== Search Files: "WININET.dll" =============
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20593_none_1aa88426d56df96a\wininet.dll
[2013-05-26 13:17][2013-04-04 21:55] 001129984 _____ (Microsoft Corporation) 28B2DD8DBAEE306290A74ED03DB3768F [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20573_none_1abe23fed55dc188\wininet.dll
[2013-02-23 14:12][2013-01-08 21:41] 001129472 _____ (Microsoft Corporation) 16C45E6881449C6330567E51C13920FA [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20565_none_1acaf47ed553d845\wininet.dll
[2013-02-23 11:18][2012-11-14 02:33] 001129472 _____ (Microsoft Corporation) 0635D714351F842D43EA184E75C4A3FF [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20557_none_1ad7c4fed549ef02\wininet.dll
[2012-09-21 23:19][2012-08-24 08:12] 001129472 _____ (Microsoft Corporation) 2895E29EFCFC0B1BCF8AEE1A0C67913C [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20553_none_1ad3c3d6d54d89a6\wininet.dll
[2012-07-30 12:36][2012-06-02 09:16] 001129472 _____ (Microsoft Corporation) E430161A632F9A8FE512DE0CA5685559 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20548_none_1ae39534d540ec68\wininet.dll
[2012-04-13 15:52][2012-02-28 01:58] 001127424 _____ (Microsoft Corporation) 11A34DCA08EB2A586246F2D6C2A81D58 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20546_none_1ae194a0d542b9ba\wininet.dll
[2012-04-01 19:04][2011-12-14 03:28] 001127424 _____ (Microsoft Corporation) 022A78194E2C7106F5AF9F2BC6AC8774 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20534_none_1aea63f8d53c6b1b\wininet.dll
[2011-12-08 22:49][2011-12-08 22:49] 001126912 _____ (Microsoft Corporation) AA75F065975FCE762FC9BBF5A3C08368 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16483_none_1a29b747bc483daf\wininet.dll
[2013-05-26 13:17][2013-04-04 23:02] 001129472 _____ (Microsoft Corporation) 2C96B3921B4CDE10DBAED5AAD760DB67 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16464_none_1a405769bc371f24\wininet.dll
[2013-02-23 14:12][2013-01-08 23:03] 001129472 _____ (Microsoft Corporation) B49B56B64F57699A1A663D2CF7D0A56F [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16457_none_1a4e2833bc2c4f38\wininet.dll
[2013-02-23 11:18][2012-11-14 02:57] 001129472 _____ (Microsoft Corporation) 7FA3A810F383588D46220967DE8B64FF [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16450_none_1a47262dbc329dd7\wininet.dll
[2012-09-21 23:19][2012-08-24 07:51] 001129472 _____ (Microsoft Corporation) 5553611E2F9EA6F613079177F1233068 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16447_none_1a58f81fbc243347\wininet.dll
[2012-07-30 12:36][2012-06-02 09:25] 001129472 _____ (Microsoft Corporation) 8E87270C4704CF2951E1E7820D6C8A2B [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16443_none_1a54f6f7bc27cdeb\wininet.dll
[2012-04-13 15:52][2012-02-28 02:11] 001127424 _____ (Microsoft Corporation) 44465367256D1C72B58F5ABAA19E7016 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16441_none_1a52f663bc299b3d\wininet.dll
[2012-04-01 19:04][2011-12-14 03:57] 001127424 _____ (Microsoft Corporation) 1D94FA7C81D2FFE494AF094619BA706F [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16434_none_1a60c72dbc1ecb51\wininet.dll
[2011-12-08 22:49][2011-12-08 22:49] 001126912 _____ (Microsoft Corporation) 2C7332C222D1FE1FC57D622699A8C001 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16421_none_1a68963bbc19635b\wininet.dll
[2011-12-08 22:38][2011-12-08 22:38] 001126912 _____ (Microsoft Corporation) A1236375B74EA63C75657D564890C436 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21754_none_1f0903a190553023\wininet.dll
[2011-12-08 22:50][2011-12-08 22:50] 000981504 _____ (Microsoft Corporation) D1E7C4FA045B34C32D12BFBB415EBE1B [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21710_none_1f30422990385b03\wininet.dll
[2011-12-08 22:47][2011-12-08 22:47] 000981504 _____ (Microsoft Corporation) 7A11DB452989040AD8570A3DCE2E9DE2 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21676_none_1ef5627790639d8c\wininet.dll
[2011-12-08 22:43][2011-12-08 22:43] 000981504 _____ (Microsoft Corporation) EDEB2904636B657782F824D8FF97D0B8 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17638_none_1e9907d67723bdd3\wininet.dll
[2011-12-08 22:50][2011-12-08 22:50] 000981504 _____ (Microsoft Corporation) 748FD4CAB1AFFD90A9556EB7D5AA1FEB [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17601_none_1eb275947711b89f\wininet.dll
[2011-12-08 22:47][2011-12-08 22:47] 000981504 _____ (Microsoft Corporation) 2CA020EACDC6DDB2BEA89FEA02C90945 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17573_none_1e68c4ce7748b1bd\wininet.dll
[2011-12-08 22:43][2011-12-08 22:43] 000981504 _____ (Microsoft Corporation) A5B19B240901CAB0C8E7767D2873613E [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
[2010-11-21 04:24][2010-11-21 04:24] 000980992 _____ (Microsoft Corporation) 44214C94911C7CFB1D52CB64D5E8368D [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll
[2017-03-08 18:48][2016-02-08 20:43] 002121216 _____ (Microsoft Corporation) EDB9618FF3238EF0FC2734F584B13A33 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_883522f9fe754b4c\wininet.dll
[2014-08-01 16:35][2014-06-18 23:13] 001791488 _____ (Microsoft Corporation) CCC198257901BEEA2FBF8EB1E7678356 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_88420a41fe6b4868\wininet.dll
[2014-06-28 11:28][2014-05-30 08:21] 001790976 _____ (Microsoft Corporation) 771CDBC3D62437D6DB070820BB1EDCCF [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_884f4ca9fe60df00\wininet.dll
[2014-08-01 16:44][2014-03-06 06:41] 001789440 _____ (Microsoft Corporation) E4E829EE073E046B0EB19B5FECB19B8C [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_88216b07fe83d256\wininet.dll
[2014-04-01 15:46][2014-04-01 15:46] 001818112 _____ (Microsoft Corporation) B5EB5BD3066959611E1F7A80FD6CC172 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20964_none_0caec81273adc02b\wininet.dll
[2014-04-01 15:21][2014-02-23 07:59] 001777664 _____ (Microsoft Corporation) 42DCEC69983C141BE35B9E097D843F32 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20768_none_0cc40cca739deecd\wininet.dll
[2013-08-15 11:34][2013-07-26 04:10] 001777664 _____ (Microsoft Corporation) DE581A5E0E70BB63898F8776EB274428 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20742_none_0cc294e6739f2259\wininet.dll
[2013-07-22 14:30][2013-06-12 05:19] 001777664 _____ (Microsoft Corporation) 24AE444B165D11835EF3D38CF3CC7FA4 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16844_none_23853e065a0011d7\wininet.dll
[2014-04-01 15:21][2014-02-23 07:54] 001767936 _____ (Microsoft Corporation) 9284BA6C27D360D71A5C0ECC8456E78E [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16660_none_239d399259eda61f\wininet.dll
[2013-08-15 11:34][2013-07-26 04:13] 001767936 _____ (Microsoft Corporation) DAA3903F06116AE9EE7AC1D1B93684A4 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16635_none_2399c6cc59f0da3f\wininet.dll
[2013-07-22 14:30][2013-06-12 00:43] 001767936 _____ (Microsoft Corporation) 9BF7C7654EFD098EE3A27B49492A382A [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16576_none_23a8811859e53d4b\wininet.dll
[2013-05-26 13:27][2013-05-26 13:27] 001767424 _____ (Microsoft Corporation) 5ABB3F36AF17007F33FA275E96A2C95E [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20593_none_76c71faa8dcb6aa0\wininet.dll
[2013-05-26 13:17][2013-04-05 00:41] 001392640 _____ (Microsoft Corporation) 7FD2D2BE22F9A319AB2FD23DD2C9968A [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20573_none_76dcbf828dbb32be\wininet.dll
[2013-02-23 14:12][2013-01-09 00:55] 001392128 _____ (Microsoft Corporation) 43A6A68F1F41B13CA4D580D40DFA57EE [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20565_none_76e990028db1497b\wininet.dll
[2013-02-23 11:18][2012-11-14 05:01] 001392128 _____ (Microsoft Corporation) 5CAF48F12E8CBD96D520F4EFD5B97F76 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20557_none_76f660828da76038\wininet.dll
[2012-09-21 23:19][2012-08-24 10:53] 001392128 _____ (Microsoft Corporation) 456D4E9006DF149C250D40B813290471 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20553_none_76f25f5a8daafadc\wininet.dll
[2012-07-30 12:36][2012-06-02 12:09] 001392128 _____ (Microsoft Corporation) 571E809181EBF0A04FEFAA9BC9961F5B [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20548_none_770230b88d9e5d9e\wininet.dll
[2012-04-13 15:52][2012-02-28 04:09] 001390080 _____ (Microsoft Corporation) B70CDC073F70E6D082A62AB5880D6B07 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20546_none_770030248da02af0\wininet.dll
[2012-04-01 19:04][2011-12-14 07:10] 001390080 _____ (Microsoft Corporation) C2FA4DBD6BB91D1AFD7D155120654AB9 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.20534_none_7708ff7c8d99dc51\wininet.dll
[2011-12-08 22:49][2011-12-08 22:49] 001389056 _____ (Microsoft Corporation) 1A5A6898E90546B476D4E8A56626FC96 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16483_none_764852cb74a5aee5\wininet.dll
[2013-05-26 13:17][2013-04-05 02:00] 001392128 _____ (Microsoft Corporation) 563C71A913CAC0C3DE5FFCD36EDB43A0 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16464_none_765ef2ed7494905a\wininet.dll
[2013-02-23 14:12][2013-01-09 02:12] 001392128 _____ (Microsoft Corporation) 435E9C764E1EF70058580996452BE6A2 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16457_none_766cc3b77489c06e\wininet.dll
[2013-02-23 11:18][2012-11-14 07:04] 001392128 _____ (Microsoft Corporation) 5121DB613E10A46A3C5085B479026AA7 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16450_none_7665c1b174900f0d\wininet.dll
[2012-09-21 23:19][2012-08-24 11:21] 001392128 _____ (Microsoft Corporation) 3D165C53E40236A68B7102D1A622D4E0 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16447_none_767793a37481a47d\wininet.dll
[2012-07-30 12:36][2012-06-02 13:05] 001392128 _____ (Microsoft Corporation) 5A45FA344F4AD99D903F4B20E43B89EC [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16443_none_7673927b74853f21\wininet.dll
[2012-04-13 15:52][2012-02-28 07:49] 001390080 _____ (Microsoft Corporation) 228443FF3A1FB0B974D278F7C6403FAD [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16441_none_767191e774870c73\wininet.dll
[2012-04-01 19:04][2011-12-14 08:04] 001390080 _____ (Microsoft Corporation) B1AC85B6ADC005CF3F9EB4E28DFDCCE6 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16434_none_767f62b1747c3c87\wininet.dll
[2011-12-08 22:49][2011-12-08 22:49] 001389056 _____ (Microsoft Corporation) 0732B49B250E306F7A6591029AF9885B [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_9.4.8112.16421_none_768731bf7476d491\wininet.dll
[2011-12-08 22:38][2011-12-08 22:38] 001389056 _____ (Microsoft Corporation) 1BF2BCC7E3C26FD4C8EF0C9EFB0CC25D [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21754_none_7b279f2548b2a159\wininet.dll
[2011-12-08 22:50][2011-12-08 22:50] 001189376 _____ (Microsoft Corporation) 6ABD901E178675DFE86CCE75F2FAC9A5 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21710_none_7b4eddad4895cc39\wininet.dll
[2011-12-08 22:47][2011-12-08 22:47] 001189376 _____ (Microsoft Corporation) BC661E59AE2BC840C6D8165F170DE7DE [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.21676_none_7b13fdfb48c10ec2\wininet.dll
[2011-12-08 22:43][2011-12-08 22:43] 001189376 _____ (Microsoft Corporation) 93679DC9407BFC602D7E6BFC027455E0 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17638_none_7ab7a35a2f812f09\wininet.dll
[2011-12-08 22:50][2011-12-08 22:50] 001188864 _____ (Microsoft Corporation) 1A36497983C867FB85FF1DCD4933015F [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17601_none_7ad111182f6f29d5\wininet.dll
[2011-12-08 22:47][2011-12-08 22:47] 001188864 _____ (Microsoft Corporation) 2DCA688631F71722B0B5E57F526BB2EB [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17573_none_7a8760522fa622f3\wininet.dll
[2011-12-08 22:43][2011-12-08 22:43] 001188864 _____ (Microsoft Corporation) AB026A724960570803E90DC370893BD0 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_7ac940242f7494a4\wininet.dll
[2010-11-21 04:23][2010-11-21 04:23] 001188864 _____ (Microsoft Corporation) F6C5302E1F4813D552F41A0AC82455E5 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_e45760b9b6cf5247\wininet.dll
[2017-03-08 18:48][2016-02-08 18:19] 002597376 _____ (Microsoft Corporation) C15649DEABA6B45562009663673E23D1 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_e453be7db6d2bc82\wininet.dll
[2014-08-01 16:35][2014-06-18 23:58] 002266112 _____ (Microsoft Corporation) 2EE102DF0EDD8A1EDD3D1E9B99A91BEC [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_e460a5c5b6c8b99e\wininet.dll
[2014-06-28 11:28][2014-05-30 08:56] 002266112 _____ (Microsoft Corporation) 40BFD9D6EC8E174145F012246CA73CCD [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_e46de82db6be5036\wininet.dll
[2014-08-01 16:44][2014-03-06 07:22] 002260480 _____ (Microsoft Corporation) F220BA78AB542C70211D73AE4729B2CD [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_e440068bb6e1438c\wininet.dll
[2014-04-01 15:46][2014-04-01 15:46] 002332160 _____ (Microsoft Corporation) E6CB36B85BE59095337427E853A5B65A [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20964_none_68cd63962c0b3161\wininet.dll
[2014-04-01 15:21][2014-02-23 08:01] 002248704 _____ (Microsoft Corporation) 2871A6CE6DDBA758870B9FC9243883AC [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20768_none_68e2a84e2bfb6003\wininet.dll
[2013-08-15 11:34][2013-07-26 05:00] 002248704 _____ (Microsoft Corporation) 5C49F5A791B944AD8247473ABD35602D [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.20742_none_68e1306a2bfc938f\wininet.dll
[2013-07-22 14:30][2013-06-12 06:12] 002248704 _____ (Microsoft Corporation) 09BF0D9701F9D846BBC5ABED003851CB [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16844_none_7fa3d98a125d830d\wininet.dll
[2014-04-01 15:21][2014-02-23 09:13] 002241536 _____ (Microsoft Corporation) 79EDF01FA13D886F8E1B655D542011FB [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16660_none_7fbbd516124b1755\wininet.dll
[2013-08-15 11:34][2013-07-26 06:13] 002241024 _____ (Microsoft Corporation) AC155DD9BD1E6D3B740826A4D1C68AAE [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16635_none_7fb86250124e4b75\wininet.dll
[2013-07-22 14:30][2013-06-12 00:26] 002241024 _____ (Microsoft Corporation) FAF6EC2460AD5FBBD38D8E1AE28B0D77 [File is digitally signed]
 
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16576_none_7fc71c9c1242ae81\wininet.dll
[2013-05-26 13:27][2013-05-26 13:27] 002242048 _____ (Microsoft Corporation) 27A9000C534AA9BADC9EE74940F50C6D [File is digitally signed]
 
C:\Windows\SysWOW64\wininet.dll
[2014-08-01 16:35][2014-06-18 23:13] 001791488 _____ (Microsoft Corporation) CCC198257901BEEA2FBF8EB1E7678356 [File is digitally signed]
 
C:\Windows\System32\wininet.dll
[2014-08-01 16:35][2014-06-18 23:58] 002266112 _____ (Microsoft Corporation) 2EE102DF0EDD8A1EDD3D1E9B99A91BEC [File is digitally signed]
 
 
====== End of Search ======

Edited by Lustrol, 08 February 2018 - 12:33 PM.


#6 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 08 February 2018 - 12:30 PM

FRST and Addition
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27.01.2018
Ran by iveta (administrator) on IVETA-PC (08-02-2018 18:01:29)
Running from C:\Users\iveta\Desktop
Loaded Profiles: iveta (Available Profiles: iveta)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
() C:\Windows\jmesoft\Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Quanta Computer Inc.) C:\Program Files (x86)\Lenovo\Lenovo BrgVolOSD\BrgVolOSD.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Lenovo) C:\Windows\jmesoft\hotkey.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
() C:\Windows\jmesoft\JME_LOAD.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\makecab.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11779176 2011-02-25] (Realtek Semiconductor)
HKLM-x32\...\Run: [OSD Utility] => C:\Program Files (x86)\Lenovo\Lenovo BrgVolOSD\BrgVolOSD.exe [18251776 2011-04-19] (Quanta Computer Inc.)
HKLM-x32\...\Run: [jmekey] => C:\Windows\jmesoft\hotkey.exe [118784 2011-05-17] (Lenovo)
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-03-16] ()
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-10-13] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [230696 2011-10-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo Dynamic Brightness System] => C:\Program Files\Lenovo\Lenovo Brightness System\RunLDBS.exe [1751904 2011-09-22] (TODO: <公司名>)
HKLM-x32\...\Run: [Lenovo Eye Distance System] => C:\Program Files\Lenovo\Lenovo Eye Distance System\Lenovo Eye Distance System.exe [264704 2011-08-09] (Lenovo)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-04-18] (Avast Software s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\...\MountPoints2: E - E:\launcher.exe
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\...\MountPoints2: G - G:\SETUP.EXE
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\...\MountPoints2: {463632a9-766c-11e1-a9d3-047d7b36fa0e} - F:\HPLauncher.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2011-12-08]
ShortcutTarget: SRS Premium Sound.lnk -> C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (SRS Labs, Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.8.14
Tcpip\..\Interfaces\{DCAA660D-9F05-42FF-97B6-1223E73AAAD5}: [DhcpNameServer] 192.168.8.14
Tcpip\..\Interfaces\{E650C693-AA05-4FCD-B038-E46A4C6E86D0}: [DhcpNameServer] 10.14.0.1
 
Internet Explorer:
==================
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LEND_skSK477
SearchScopes: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LEND_skSK477
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-16] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-01] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-16] (Avast Software s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-01] (Google Inc.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-01] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-01] (Google Inc.)
Toolbar: HKU\S-1-5-21-4053589787-4222441539-3579493451-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-01] (Google Inc.)
 
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-16] [Legacy] [not signed]
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-01-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-01-14] (Google Inc.)
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND" 
CHR Profile: C:\Users\iveta\AppData\Local\Google\Chrome\User Data\Default [2018-02-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\iveta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-16]
CHR crx: C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\default_apps\search.crx [2015-07-13]
CHR crx: C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\default_apps\search.crx [2015-04-13]
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-16] (Avast Software s.r.o.)
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-03-16] () [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2006-11-10] (Nero AG) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-16] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-16] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-16] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-16] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-16] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-03-16] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-16] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-03-16] ()
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2018-02-08] (Malwarebytes)
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1460808 2013-05-02] (Realtek Semiconductor Corporation )
S1 VD_FileDisk; C:\Windows\SysWow64\Drivers\VD_FileDisk.sys [15872 2006-01-13] (Flint Incorporation) [File not signed]
R3 VMC412; C:\Windows\System32\Drivers\VMC412.sys [243328 2011-07-13] (Vimicro Corporation)
R0 WinI2C-DDC; C:\Windows\System32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R0 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [15712 2010-03-23] (Nicomsoft Ltd.)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-02-08 18:01 - 2018-02-08 18:03 - 000012874 _____ C:\Users\iveta\Desktop\FRST.txt
2018-02-08 17:53 - 2018-02-08 17:56 - 000020143 _____ C:\Users\iveta\Desktop\Search.txt
2018-02-08 17:53 - 2018-02-08 17:53 - 000084300 _____ C:\Users\iveta\Desktop\sfcdetails.txt
2018-02-05 19:40 - 2018-02-05 19:40 - 000000000 ____D C:\Users\iveta\AppData\Local\ESET
2018-02-05 19:37 - 2018-02-05 19:36 - 006968952 _____ (ESET spol. s r.o.) C:\Users\iveta\Desktop\esetonlinescanner_sky.exe
2018-02-05 18:35 - 2018-02-05 18:35 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-05 17:20 - 2018-02-05 17:23 - 003168136 _____ (AVAST Software) C:\Windows\SysWOW64\HTMLayout.dll
2018-02-05 17:06 - 2018-02-05 17:23 - 003168136 _____ (AVAST Software) C:\Windows\system32\HTMLayout.dll
2018-02-05 17:00 - 2018-02-05 17:23 - 003168136 _____ (AVAST Software) C:\Windows\system\HTMLayout.dll
2018-02-05 16:52 - 2018-02-05 16:55 - 000002138 _____ C:\Users\iveta\Desktop\Rkill.txt
2018-02-03 19:25 - 2018-02-08 18:01 - 000000000 ____D C:\FRST
2018-02-03 19:25 - 2018-02-03 19:25 - 000000000 ____D C:\Users\iveta\AppData\Local\ElevatedDiagnostics
2018-02-03 19:25 - 2018-02-03 19:14 - 002393088 _____ (Farbar) C:\Users\iveta\Desktop\FRST64.exe
2018-02-03 16:25 - 2018-02-03 16:25 - 000003272 ____N C:\bootsqm.dat
2018-02-03 16:10 - 2018-02-08 17:57 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-02-03 16:00 - 2018-02-03 15:56 - 008905328 _____ (AVAST Software) C:\Users\iveta\Desktop\avastclear.exe
2018-02-03 15:15 - 2018-02-03 15:15 - 000000000 ____D C:\Users\iveta\AppData\Local\AvgSetupLog
2018-02-03 15:15 - 2018-02-03 15:15 - 000000000 ____D C:\Users\iveta\AppData\Local\Avg
2018-02-03 15:15 - 2018-02-03 15:15 - 000000000 ____D C:\ProgramData\Avg
2018-02-03 14:53 - 2018-02-03 14:53 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-02-03 14:53 - 2018-02-03 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-02-03 14:53 - 2018-02-03 14:53 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-02-03 14:53 - 2018-02-03 14:53 - 000000000 ____D C:\Program Files\Malwarebytes
2018-02-03 14:53 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2018-02-03 13:50 - 2018-02-05 18:49 - 000000000 ____D C:\Users\iveta\Desktop\New Folder
2018-02-03 13:35 - 2018-02-03 13:32 - 705157904 _____ (Avira GmbH) C:\Users\iveta\Desktop\rescue-system.exe
2018-02-02 12:40 - 2018-02-08 17:35 - 001404116 _____ C:\Windows\ntbtlog.txt
2018-01-14 14:47 - 2018-01-14 14:47 - 000003920 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-01-14 14:47 - 2018-01-14 14:47 - 000000000 ____D C:\Program Files\Common Files\avast software
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2018-02-08 18:03 - 2009-07-14 05:45 - 000031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-08 18:03 - 2009-07-14 05:45 - 000031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-08 17:57 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-06 17:55 - 2009-07-14 06:13 - 000782510 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-06 17:55 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-05 19:02 - 2012-03-22 16:30 - 000070320 _____ C:\Users\iveta\AppData\Local\GDIPFONTCACHEV1.DAT
2018-02-05 17:20 - 2015-01-19 19:38 - 000000000 ____D C:\Windows\SysWOW64\AVAST Software
2018-02-05 17:00 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system
2018-01-14 14:48 - 2015-07-18 13:11 - 000003368 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-01-14 14:47 - 2017-03-08 17:06 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-01-14 14:47 - 2011-12-08 23:18 - 000003240 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
 
==================== Files in the root of some directories =======
 
2014-03-28 20:28 - 2014-03-28 20:28 - 049940480 _____ () C:\Program Files (x86)\GUTEE74.tmp
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
LastRegBack: 2014-04-01 11:06
 
==================== End of FRST.txt ============================
 
Addition.txt
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27.01.2018
Ran by iveta (08-02-2018 18:04:10)
Running from C:\Users\iveta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-03-22 15:29:16)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-4053589787-4222441539-3579493451-500 - Administrator - Disabled)
Guest (S-1-5-21-4053589787-4222441539-3579493451-501 - Limited - Disabled)
iveta (S-1-5-21-4053589787-4222441539-3579493451-1000 - Administrator - Enabled) => C:\Users\iveta
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{FFB768E4-E427-4553-BC36-A11F5E62A94D}) (Version: 10.1.53.64 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2214 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.22 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Driver & Application Installation (HKLM-x32\...\{BFECCF2A-F094-4066-8BFA-29CCBB7F6602}) (Version: 6.01.0930 - Lenovo)
FlatOut 2 (HKLM-x32\...\{4E6D2462-AB33-40BB-AA9F-3FA3E0DD0290}) (Version: 1.00.0000 - Empire Interactive)
Google Earth Plug-in (HKLM-x32\...\{79361740-EAE3-11E2-9911-B8AC6F98CCE3}) (Version: 7.1.1.1888 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Spoločnosť Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2312 - Intel Corporation)
ITE Infrared Transceiver (HKLM-x32\...\{40580068-9B10-40B5-9548-536CE88AB23C}) (Version: 1.00.0000 - ITE)
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.3.11.0525 - Lenovo)
Lenovo BrgVolOSD (HKLM-x32\...\{C92E0848-8CDF-451B-9622-0871EC6866F9}) (Version: 1.0.03 - Lenovo)
Lenovo Camera Fun Zone (HKLM-x32\...\motiongame) (Version: 0.8.9.3 - Tose(Shanghai) Ltd.)
Lenovo Dynamic Brightness System (HKLM-x32\...\{D9ED6D06-6002-495E-A7BC-46E6AE386996}) (Version: 4.0.01.33221 - Lenovo)
Lenovo Eye Distance System (HKLM-x32\...\{5183D7AB-D09B-411F-A74E-BBAEA61C6505}) (Version: 4.0.0032210 - Lenovo)
Lenovo Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3720 - CyberLink Corp.) Hidden
Lenovo Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3720 - CyberLink Corp.)
Lenovo Rescue System (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.1409 - CyberLink Corp.) Hidden
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.1409 - CyberLink Corp.)
Lenovo USB2.0 UVC Camera (HKLM-x32\...\{70D2C5B8-EB22-45B1-9EAA-5E8C1C408A3B}) (Version: 1.00.0000 - Vimicro Corporation)
Lenovo YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4612 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4612 - CyberLink Corp.)
LenovoUtility version 1.0 (HKLM-x32\...\{4F949BD9-1E99-40C7-9102-C67E2D384995}_is1) (Version: 1.0 - Lenovo)
LibreOffice 3.5 (HKLM-x32\...\{09D72100-CAC9-42BF-AD52-47F784C92DB6}) (Version: 3.5.2.202 - The Document Foundation)
LVT (HKLM-x32\...\{D3063097-EC84-4D21-84A4-9D852E974355}) (Version: 4.0.4.1013 - Lenovo)
Malwarebytes verzia 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Nero 7 Ultra Edition (HKLM-x32\...\{4908C75E-E5E2-43F7-B1DF-023CBA831051}) (Version: 7.02.2631 - Nero AG)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM-x32\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (HKLM-x32\...\{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}) (Version: 15.4.5722.2 - Microsoft Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.82 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0168 - )
SRS Premium Sound Control Panel (HKLM\...\{72BF6A99-28AA-4B18-8F33-535C82F7BD00}) (Version: 1.11.3500 - SRS Labs, Inc.)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Tom Clancy's Rainbow Six Vegas (HKLM-x32\...\{5731C0A8-B266-451A-8D3F-8066AA21836F}) (Version: 1.00.000 - Ubisoft)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.0 beta 24 - Ghisler Software GmbH)
Total Commander Ultima Prime 4.9.0.0 (HKLM-x32\...\TC UP) (Version: 4.9.0.0 - ULTIMA PRIME)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} =>  -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-03-10] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-03-16] (Avast Software s.r.o.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} =>  -> No File
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {39A7BB3E-5194-48DD-AB3A-7719CA180A50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {39A7BB3E-5194-48DD-AB3A-7719CA180A50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
Task: {5EF4B85D-FFC0-4F4F-B7D6-6A172108D219} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-01] (Google Inc.)
Task: {6CE75E4A-56BE-4FC2-A0DA-B9C729D34D3A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-08-22] (Piriform Ltd)
Task: {6E3EBD80-3D4C-4ACA-96AC-EB8F444343AB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2018-01-14] (AVAST Software)
Task: {805109C0-8E30-49A3-B10F-B1D05E034CD4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-10-13] (CyberLink)
Task: {80E5D4F0-76F2-4742-9CA4-491056E63AAE} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2018-02-03] (AVAST Software)
Task: {84884897-AFEE-4A19-9E55-C3838F2D6ADE} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(1): %windir%\system32\GWX\GWXUXWorker.exe -> /ScheduleUpgradeReminderTime
Task: {84884897-AFEE-4A19-9E55-C3838F2D6ADE} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
Task: {9864FE32-4CEA-45C2-97CE-3EF449C74B10} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-01] (Google Inc.)
Task: {B21EA15E-D680-4723-9BF2-BA56C5D49B26} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {B21EA15E-D680-4723-9BF2-BA56C5D49B26} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
Task: {C9379191-B14D-458D-A9B2-DC8735F1601B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-01-14] (AVAST Software)
Task: {DBBAC18C-58E8-48AA-8EED-C60361D2EE8C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {DBBAC18C-58E8-48AA-8EED-C60361D2EE8C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {DBBAC18C-58E8-48AA-8EED-C60361D2EE8C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2016-03-20] (Microsoft Corporation)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
 
==================== Loaded Modules (Whitelisted) ==============
 
2011-07-06 03:42 - 2011-03-10 03:48 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-12-08 23:02 - 2011-03-16 05:47 - 000032768 _____ () C:\Windows\jmesoft\Service.exe
2018-02-03 14:53 - 2017-11-29 09:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2011-12-08 23:02 - 2011-05-17 22:54 - 000024576 _____ () C:\Windows\jmesoft\JME_LOAD.exe
2015-03-16 20:29 - 2015-03-16 20:29 - 000104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-03-16 20:29 - 2015-03-16 20:29 - 000081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2018-02-06 17:39 - 2018-02-06 17:39 - 005892920 _____ () C:\Program Files\AVAST Software\Avast\defs\18020600\algo.dll
2018-02-08 18:00 - 2018-02-08 18:00 - 005892920 _____ () C:\Program Files\AVAST Software\Avast\defs\18020800\algo.dll
2009-12-05 01:59 - 2009-12-05 01:59 - 000619816 ____N () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll
2009-12-05 02:04 - 2009-12-05 02:04 - 000013096 ____N () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll
2011-12-08 23:02 - 2011-05-17 22:27 - 000028672 _____ () C:\Windows\jmesoft\hidhook.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-4053589787-4222441539-3579493451-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\iveta\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.8.14
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{AEF38D63-9ED5-4336-B4ED-708C5A86855B}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{1542DC94-8D4C-4740-8DC0-93BAFF803B0C}] => (Allow) LPort=2869
FirewallRules: [{82CAE3DD-B66F-4F6F-8133-95374ADE0DF7}] => (Allow) LPort=1900
FirewallRules: [{D63E4B8D-4A89-4021-A90C-5F4D8CD30F4E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{46A43795-CFE2-4DF2-9914-8439E0D5AC21}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{59150848-A381-4305-B07C-0AAD3CC72F0F}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Game.exe
FirewallRules: [{B7F40C57-BBF7-458A-BEB2-F53CCFAB2300}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Game.exe
FirewallRules: [{542DAB6F-BEDD-4C06-A625-8512D1FA9AD4}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe
FirewallRules: [{BC50FF25-1447-43B5-B44D-8D5728021FFA}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe
FirewallRules: [{4A23C16D-04C4-4E31-9810-BB2A1A6DE660}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Restore Points =========================
 
25-06-2017 18:30:19 Windows Update
01-07-2017 15:36:06 Windows Update
04-07-2017 19:22:15 Windows Update
08-08-2017 14:39:44 Windows Update
08-08-2017 15:32:13 Windows Update
08-08-2017 20:01:18 Windows Update
09-08-2017 12:58:35 Windows Update
09-08-2017 13:45:39 Windows Update
05-09-2017 14:29:12 Windows Update
05-09-2017 19:57:45 Windows Update
06-09-2017 19:27:20 Windows Update
07-09-2017 14:14:39 Windows Update
07-09-2017 16:07:18 Windows Update
08-09-2017 06:56:50 Windows Update
05-02-2018 18:34:31 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (02/08/2018 05:58:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/08/2018 05:36:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/06/2018 05:55:12 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/06/2018 05:55:12 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/06/2018 05:50:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/06/2018 05:42:45 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/06/2018 05:42:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/06/2018 05:36:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
 
Error: (02/05/2018 07:41:25 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (02/05/2018 07:41:25 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01B language ID. The first DWORD in the Data section contains the Win32 error code.
 
 
System errors:
=============
Error: (02/08/2018 06:02:46 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update sa pri spustení zablokovala.
 
Error: (02/08/2018 05:57:58 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému zlyhali pri načítaní: 
VD_FileDisk
 
Error: (02/08/2018 05:57:27 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\VD_FileDisk.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (02/08/2018 05:35:52 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service gupdatem with arguments "/comsvc" in order to run the server:
{E225E692-4B47-4777-9BED-4FD7FE257F0E}
 
Error: (02/08/2018 05:35:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/08/2018 05:35:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Server, od ktorej závisí služba Computer Browser, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/08/2018 05:35:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Spustenie služby Function Discovery Provider Host, od ktorej závisí služba HomeGroup Provider, zlyhalo kvôli nasledujúcej chybe: 
Závislú službu alebo skupinu sa nepodarilo spustiť.
 
Error: (02/08/2018 05:35:39 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
 
Error: (02/08/2018 05:35:35 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
 
Error: (02/08/2018 05:35:29 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
 
 
==================== Memory info =========================== 
 
Processor: Intel® Pentium® CPU G630 @ 2.70GHz
Percentage of memory in use: 47%
Total physical RAM: 1958.39 MB
Available physical RAM: 1037.32 MB
Total Virtual: 3916.79 MB
Available Virtual: 2705.2 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:440.49 GB) (Free:340.28 GB) NTFS ==>[system with boot components (obtained from drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 9437F9C6)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=440.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)
 
==================== End of Addition.txt ============================


#7 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 09 February 2018 - 11:48 AM

Hi Lustrol,
 
Good job posting the logs :thumbup2:
 
Can you please tell me how your computer is performing now. Do you still get an error when you start your computer in normal mode? Is the performance still slow? The logs show that your anti-virus program, Avast, is installed and enabled.
 
Let me know if you have any questions.
 
polskamachina


Member of the Bleeping Computer A.I.I. early response team!

#8 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 09 February 2018 - 01:33 PM

Yes I still have problems. At startup always throw away the error from the first picture. Avast can not open or uninstall. Even with Avastclear.exe. Next, for example, I can not open device manager - error 2, it is not possible to change date and time - error 3. And the computer is still slowed down.
 
Translation error 2 :-) 
Microsoft Management Console
Not enough storage space to perform the operation. 

Attached Files



#9 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 10 February 2018 - 04:36 PM

Hi Lustrol :)

 

Thank you for the detailed information you supplied. Let's see if we can make some progress with the aid of the following tools. The first one is an uninstaller which should be able to uninstall Avast. The second one does an overall check and makes repairs as needed.

 

Let's begin:

Note: Revo Uninstaller does a more thorough job deleting programs on your computer than using the Programs and Features option in Windows. Since it is a more powerful tool, please be sure to follow the instructions VERY carefully.
Note: If the program you want to uninstall is not listed by Revo, let me know and we will try an alternate method of removal.

  • Please download and install Revo Uninstaller Free
    note: there is no need to click anything on that page, the download will start automatically
  • Double click Revo Uninstaller to run it
  • From the list of your installed programs double click on Avast Free Antivirus
  • When prompted if you want to uninstall click Yes (even if the Avira uninstaller fails, please continue with the rest of these directions)
  • Be sure the Advanced option is selected then click Next
  • The program will run, If prompted again click Yes
  • Note this important step: Before Revo removes the remnants of the program, the original program's uninstaller will run and will prompt you that the process is complete. Then it may ask you to restart your computer. DO NOT RESTART YOUR COMPUTER AT THIS TIME. Click cancel on the restart option and continue with the uninstallation process.
  • Once the program has searched for leftovers click Next
  • Check the box for Select All, then click Delete and accept the prompt that asks if you want to delete the selections
  • When prompted click on Yes and then on Next
  • Repeat the above 3 steps until the uninstall completes
  • Once done click Finish
  • Restart your computer after Revo has finished with the uninstall

Next:

Download Windows Repair (All in One) from this site

Install the program then run it. (Note: The illustrations and directions below are for an older version of the software however the two versions should be similar enough so that you can still figure out what to do)
- Disable all your antivirus and antimalware software - see how to do that here.
- Right click on QfBzvq1.png and select Run as Administrator to start Windows Repair All-In-One.
(Windows Vista/7/8 users: Accept UAC warning if it is enabled.)

- A window will appear. Click Step 2.
2f8o60N.png

- Click the Open Pre-Scan button, then click Start Scan. Wait for Windows Repair to finish scanning.

- Depending on which error Windows Repair found, click Repair Reparse Point or Repair Environment Variable accordingly. When the button changes to "Done!", click the close button to return to Windows Repair.

- Go to Step 3, then click Check in the See If Check Disk Is Needed.

- If Windows Repair stated that errors are found, click Open Check Disk At Next Boot. Choose (/R) Fixes errors on the disk also locate bad sectors and recovers readable information, then click Add To Next Boot. Reboot the computer to let Windows check the disk.
Ymy7crZ.png

- Go to Step 4, then click Do It.
zDtdN75.png

- Go to Step 5. Under System Restore click Create.
f7lEe1N.png

- Go to Repairs and click Open Repairs. Leave all checkmarks as they are, then click Start Repairs.
PGv2vtD.png

- By default Windows Repair All-In-One will create a Logs folder in its folder on the Desktop. Please copy and paste the contents of the log into your next reply to me.

In summary I will need from you:

  • What were the results of your Revo uninstall of Avast?
  • All-In-One log
  • How is your computer performing now?

Let me know if you have any questions.

polskamachina


Member of the Bleeping Computer A.I.I. early response team!

#10 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 11 February 2018 - 02:45 AM

Uninstaller failed to run. Should I even run a repair?

Attached Files



#11 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 12 February 2018 - 11:17 AM

Hi Lustrol :)

You said:

Uninstaller failed to run. Should I even run a repair?

  • Please try running the All-in-one-repair as described in my previous post and see if it will run
  • If it runs and completes, please copy and paste the All-in-one-repair log into your next reply to me
  • Try running Revo to uninstall Avast and see if that will run
  • Let me know the results of your attempt to run Revo

If the All-in-one repair was not successful, then please proceed with the following:

I would like you to follow this link which will show you how to perform a clean boot in normal mode. If after performing a clean boot, your issues disappear, we can then narrow down which item is the culprit. For your convenience, I've copied the clean boot directions below:
=====================================================
Perform a Clean Boot in Windows 7/8/10

Although Microsoft is diligent in making sure Windows works well, not all hardware manufacturers and software publishers have the resources or motivation to provide products that operate flawlessly.

If the hardware and software in your PC are not working correctly, you need a way to boot up Windows so you can find out which component is causing the problem. Learn how to perform a clean boot in Windows 7/8/10 to troubleshoot malfunctioning hardware and software.

Safe Mode vs. Clean Boot

A popular method of troubleshooting and diagnosing a PC is to boot into Safe Mode. Safe Mode loads Windows with a minimal set of drivers. For example, when you boot up into Safe Mode, Windows loads only a standard VGA video driver. This is why your PC is set to a very low resolution when you boot into Safe Mode.

A Clean Boot is a bit different from Safe Mode. With a Clean Boot, Windows starts up in normal mode but without any non-Microsoft background applications and services. These background applications and services are what make Windows behave the way it does. Most people are unaware that these elements of Windows are even running.

Starting Windows with a Clean Boot is easy. You simply temporarily turn off all non-Microsoft services and restart your PC. When it boots up, only Microsoft services will be running, allowing you to step through turning on different services until you find the problem.

Performing a Clean Boot in Windows

Log in to Windows using an account that has administrative privileges Click on Start>Run. If you don’t have the Run command on your Start menu, you can alternatively hold down the Windows key on your keyboard and press the R key. With the Run dialogue window open, type in msconfig and click the OK button.

 

Type-MSCONFIG-in-the-Run-Dialogue-Window
You should now be looking at the System Configuration window. Click on the Services tab.
Services-Tab-on-the-System-Configuration
On the Services tab, you’ll notice a long list of services available on your PC. Some have checks next to them and some don’t. Those that do are scheduled to load automatically the next time Windows boots up. This next step is extremely important so don’t skip it.
Perform-Clean-Boot-in-Windows-7_thumb.pn
First, check the box labeled Hide All Microsoft Services. As its name implies, this will hide all Microsoft services on the list. Most if not all of these services are required for Windows to function properly.

Next, click the Disable All button. By performing these two steps, you have effectively turned off all services from third-party software developers. All Microsoft services remain intact and ready to load when you reboot Windows.

In addition, you should also click on the Startup tab and disable all startup programs. Note that this tab is a little more tricky because there is no way to separate the system startup programs from the third-party ones. So disabling all of them could disable your wireless card, Windows Defender, etc. However, you can easily re-enable everything at a later point, so it’s worth trying once.
In Windows 7, the Startup items can be disabled from within msconfig:
disable-startup-programs.png
In Windows 10, you have to open Task Manager and click on the Startup tab there.
win-10-startup.png
Finally, click the OK button on the MSCONFIG dialog and reboot Windows. When you reboot, you may get messages that certain hardware and software are not available. This is normal. In fact, by disabling these components in your PC, you can go back to the Services tab on the System Configuration window and turn on only those services known to be functioning properly. The rest you can turn on one at a time to troubleshoot the errors you were getting in Windows.

Different from Safe Mode, a Clean Boot lets you disable all non-Microsoft background applications and services to troubleshoot a PC running Windows. Once disabled, you can begin turning third-party services back on to diagnose your computer. Just be sure to hide all Microsoft services before you use the Disable All button. Otherwise, you may encounter boot up errors when you reboot your PC.

In summary I will need from you:

  • All-in-one repair log if you were able to run it
  • If the All-in-one repair was unsuccessful, let me know if your computer was able to perform a clean boot and if that affected the appearance of those errors that were popping up
  • How is your computer performing now?

Let me know if you have any questions.

polskamachina


Member of the Bleeping Computer A.I.I. early response team!

#12 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 12 February 2018 - 05:09 PM

I cannot install repair.

Attached Files



#13 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 13 February 2018 - 05:39 PM

Hi Lustrol :)

Sorry we've not made any progress. Let's try and replace the wininet.dll files with later versions and see if that makes a difference.

  • Note: The following fix will empty your recycle bin and remove your temporary files. If you have anything in those places that you want to keep, now is the time to retrieve them.
  • Highlight the text below in its entirety and press Ctrl-C
Start::
CreateRestorePoint:
CloseProcesses:
C:\Program Files (x86)\GUTEE74.tmp
Replace: C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll C:\Windows\SysWOW64\wininet.dll 
Replace: C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_e45760b9b6cf5247\wininet.dll C:\Windows\System32\wininet.dll
EmptyTemp:
End::
  • Run FRST64
  • After the tool updates, click on Fix
  • You will be prompted to restart your computer when the fix has completed
  • After the computer restarts, a file named Fixlog.txt will be created and will be placed on your Desktop
  • Please copy and paste the contents of that file into your next reply to me

Next:

  • Try running Revo again and let me know what happens

In summary I will need from you:

  • Fixlog.txt
  • Results of your attempt to run Revo
  • Are you still getting those error messages?

Let me know if you have any questions.

polskamachina


Member of the Bleeping Computer A.I.I. early response team!

#14 Lustrol

Lustrol
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  

Posted 13 February 2018 - 06:39 PM

Thank you very much. Problem is solved. I uninstalled Avast, installed AVG. The system looks fully functional and fast enough. It would help me to add AVG security software to AVG so that it does not repeat the situation. Ideal free :-) 
 
I attach Fixlog:
 
Fix result of Farbar Recovery Scan Tool (x64) Version: 27.01.2018
Ran by iveta (13-02-2018 23:54:30) Run:1
Running from C:\Users\iveta\Desktop
Loaded Profiles: iveta (Available Profiles: iveta)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
C:\Program Files (x86)\GUTEE74.tmp
Replace: C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll C:\Windows\SysWOW64\wininet.dll 
Replace: C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_e45760b9b6cf5247\wininet.dll C:\Windows\System32\wininet.dll
EmptyTemp:
 
*****************
 
Restore point was successfully created.
Processes closed successfully.
C:\Program Files (x86)\GUTEE74.tmp => moved successfully
"C:\Windows\SysWOW64\wininet.dll" => Could not move.
C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll copied successfully to C:\Windows\SysWOW64\wininet.dll
"C:\Windows\System32\wininet.dll" => Could not move.
C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_e45760b9b6cf5247\wininet.dll copied successfully to C:\Windows\System32\wininet.dll
 
=========== EmptyTemp: ==========
 
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9706689 B
Java, Flash, Steam htmlcache => 470 B
Windows/system/drivers => 4499667968 B
Edge => 0 B
Chrome => 10649794 B
Firefox => 0 B
Opera => 0 B
 
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42371835 B
systemprofile32 => 71314 B
LocalService => 16674 B
NetworkService => 0 B
iveta => 706566612 B
 
RecycleBin => 0 B
EmptyTemp: => 4.9 GB temporary data Removed.
 
================================
 
 
The system needed a reboot.
 
==== End of Fixlog 23:56:44 ====


#15 polskamachina

polskamachina

  • Malware Study Hall Senior
  • 3,839 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:28 AM

Posted 14 February 2018 - 11:58 AM

Hi Lustrol,
 
You said:
Thank you very much. Problem is solved. I uninstalled Avast, installed AVG. The system looks fully functional and fast enough.

You're welcome for the help and I'm glad we were able to solve the problem. Your brief but detailed explanations helped pinpoint the trouble. :) Many times it is not possible to go back in time and figure out how files got corrupted but I would not expect this to be a recurring problem.

It would help me to add AVG security software to AVG so that it does not repeat the situation. Ideal free :-)

I don't understand what you mean by saying it would help you "to add AVG security software to AVG,,," Did you want to a second security software that is not AVG? AVG is already an anti-virus, security program.

 

polskamachina

 


Member of the Bleeping Computer A.I.I. early response team!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users